docs(users): document that system-level actions share one permission - #650
Draft
MRmarioruci wants to merge 1 commit into
Draft
docs(users): document that system-level actions share one permission#650MRmarioruci wants to merge 1 commit into
MRmarioruci wants to merge 1 commit into
Conversation
SystemUpgrade, SetDisasterRecovery and SystemRestore are presented as separate actions in the wallet and the policy editor, but all three resolve to a single permission. Policies are matched by that shared key and OR-combined, so the least restrictive policy on any of the three governs all of them, and SystemRestore cannot be scoped at all. Delegating disaster recovery configuration is also terminal on its own, since it sets which group is the recovery committee and its quorum, so a group able to approve it can appoint itself and recover the station with code of its choosing. Document both so operators can size the delegation correctly. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Change
Documentation only.
SystemUpgrade,SetDisasterRecoveryandSystemRestoreare presented as three separately-labelled actions in the policy editor, and the docs tell operators to configure policies per action. All three resolve to a single permission, and matching policies are OR-combined, so the least restrictive policy on any of them governs all three.SystemRestorehas no specifier of its own and cannot be scoped independently.Adds a section to the user guide on permissions and policies setting that out, so operators can size a delegation of any of the three correctly.
No code change.
Follow-up
A matching affordance in the policy editor would be the natural complement, but the action label is reused in request titles and lists, so where it belongs is a design decision rather than a locale edit.