diff options
Diffstat (limited to 'ipalib/plugins/permission.py')
| -rw-r--r-- | ipalib/plugins/permission.py | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/ipalib/plugins/permission.py b/ipalib/plugins/permission.py index 784b4dae5..db063334f 100644 --- a/ipalib/plugins/permission.py +++ b/ipalib/plugins/permission.py @@ -19,11 +19,12 @@ """ Permissions -A permission enables fine-grained delegation of permissions. Access Control -Rules, or instructions (ACIs), grant permission to permissions to perform -given tasks such as adding a user, modifying a group, etc. +A permission enables fine-grained delegation of rights. A permission is +a human-readable form of a 389-ds Access Control Rule, or instruction (ACI). +A permission grants the right to perform a specific task such as adding a +user, modifying a group, etc. -A permission may not be members of other permissions. +A permission may not contain other permissions. * A permissions grants access to read, write, add or delete. * A privilege combines similar permissions (for example all the permissions |