From 088e2ecba73fedebb0b7729a1f07022fd6155c22 Mon Sep 17 00:00:00 2001
From: Russ Allbery <rra@stanford.edu>
Date: Tue, 18 Sep 2007 23:40:37 +0000
Subject: Document the locked flag in the server backend and client man pages.
 Document locked flag issues when implementing a new object type.

---
 client/wallet.pod | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'client')

diff --git a/client/wallet.pod b/client/wallet.pod
index a330b0a..263e623 100644
--- a/client/wallet.pod
+++ b/client/wallet.pod
@@ -111,6 +111,11 @@ Administrators can run any command on any object or ACL except for C<get>
 and C<store>.  For C<get> and C<show>, they must still be authorized by
 either the appropriate specific ACL or the owner ACL.
 
+If the locked flag is set on an object, no commands can be run on that
+object that change data except the C<flags> commands, nor can the C<get>
+command be used on that object.  C<show>, C<getacl>, and C<owner> or
+C<expires> without an argument can still be used on that object.
+
 =over 4
 
 =item acl add <id> <scheme> <identifier>
-- 
cgit v1.2.3