diff options
| author | Russ Allbery <rra@stanford.edu> | 2007-09-18 23:40:37 +0000 |
|---|---|---|
| committer | Russ Allbery <rra@stanford.edu> | 2007-09-18 23:40:37 +0000 |
| commit | 088e2ecba73fedebb0b7729a1f07022fd6155c22 (patch) | |
| tree | 2d55f924132d08cb1ebd56a5c482db5d855f9a47 /server | |
| parent | e435832256e0ba069b771e9bb350e749600efcd4 (diff) | |
Document the locked flag in the server backend and client man pages.
Document locked flag issues when implementing a new object type.
Diffstat (limited to 'server')
| -rwxr-xr-x | server/wallet-backend | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/server/wallet-backend b/server/wallet-backend index 1eafee5..b54f6c3 100755 --- a/server/wallet-backend +++ b/server/wallet-backend @@ -223,6 +223,11 @@ Administrators can run any command on any object or ACL except for C<get> and C<store>. For C<get> and C<show>, they must still be authorized by either the appropriate specific ACL or the owner ACL. +If the locked flag is set on an object, no commands can be run on that +object that change data except the C<flags> commands, nor can the C<get> +command be used on that object. C<show>, C<getacl>, and C<owner> or +C<expires> without an argument can still be used on that object. + =over 4 =item acl add <id> <scheme> <identifier> |