summaryrefslogtreecommitdiffstats
path: root/ipalib/plugins/permission.py
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2011-02-22 16:24:41 -0500
committerRob Crittenden <rcritten@redhat.com>2011-02-23 11:57:10 -0500
commitb5e43bb866392a70d775f31994f7e856972956b2 (patch)
treec6cf3ed4f6d0644deb0802d4d421814ad13ce89a /ipalib/plugins/permission.py
parent388c9a1705bd3e6744ca996559cb4372c532056e (diff)
downloadfreeipa-b5e43bb866392a70d775f31994f7e856972956b2.tar.gz
freeipa-b5e43bb866392a70d775f31994f7e856972956b2.tar.xz
freeipa-b5e43bb866392a70d775f31994f7e856972956b2.zip
Make permission and privilege help text clearer
ticket 996
Diffstat (limited to 'ipalib/plugins/permission.py')
-rw-r--r--ipalib/plugins/permission.py9
1 files changed, 5 insertions, 4 deletions
diff --git a/ipalib/plugins/permission.py b/ipalib/plugins/permission.py
index 784b4dae5..db063334f 100644
--- a/ipalib/plugins/permission.py
+++ b/ipalib/plugins/permission.py
@@ -19,11 +19,12 @@
"""
Permissions
-A permission enables fine-grained delegation of permissions. Access Control
-Rules, or instructions (ACIs), grant permission to permissions to perform
-given tasks such as adding a user, modifying a group, etc.
+A permission enables fine-grained delegation of rights. A permission is
+a human-readable form of a 389-ds Access Control Rule, or instruction (ACI).
+A permission grants the right to perform a specific task such as adding a
+user, modifying a group, etc.
-A permission may not be members of other permissions.
+A permission may not contain other permissions.
* A permissions grants access to read, write, add or delete.
* A privilege combines similar permissions (for example all the permissions