From 088e2ecba73fedebb0b7729a1f07022fd6155c22 Mon Sep 17 00:00:00 2001
From: Russ Allbery <rra@stanford.edu>
Date: Tue, 18 Sep 2007 23:40:37 +0000
Subject: Document the locked flag in the server backend and client man pages.
 Document locked flag issues when implementing a new object type.

---
 server/wallet-backend | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'server/wallet-backend')

diff --git a/server/wallet-backend b/server/wallet-backend
index 1eafee5..b54f6c3 100755
--- a/server/wallet-backend
+++ b/server/wallet-backend
@@ -223,6 +223,11 @@ Administrators can run any command on any object or ACL except for C<get>
 and C<store>.  For C<get> and C<show>, they must still be authorized by
 either the appropriate specific ACL or the owner ACL.
 
+If the locked flag is set on an object, no commands can be run on that
+object that change data except the C<flags> commands, nor can the C<get>
+command be used on that object.  C<show>, C<getacl>, and C<owner> or
+C<expires> without an argument can still be used on that object.
+
 =over 4
 
 =item acl add <id> <scheme> <identifier>
-- 
cgit v1.2.3