diff options
Diffstat (limited to 'docs/access.md')
| -rw-r--r-- | docs/access.md | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/docs/access.md b/docs/access.md index 7392bb9..c639d0d 100644 --- a/docs/access.md +++ b/docs/access.md @@ -20,9 +20,11 @@ password hashes: every member reads the document). * **Names** are what `--htpasswd` and the proxy give: 1 to 64 of `A-Z a-z 0-9 . _ @ -`. * **Capabilities** (`caps`): each a path, as segments as the store's API takes them, and the rights it gives there and below: `read`, `write`. A capability covers its - path segment by segment (`servers/eu` covers `servers/eu/0`, not `servers/europe`). - One outside protocol data never covers protocol data: `[]` is all of the swarm's - data, `["_continuum"]` protocol data, managing users included (`_continuum/users`). + path segment by segment (`servers/eu` covers `servers/eu/0`, not `servers/europe`), + `*` for any one key (`servers/*/name` covers `servers/eu/name` and `servers/us/name`; + a key that is `*` itself can't be named alone). One outside protocol data never + covers protocol data, nor one with `*` first: `[]` is all of the swarm's data, + `["_continuum"]` protocol data, managing users included (`_continuum/users`). They are kept by a random ID, so two capabilities granted at once both hold, and revoking one removes it alone. Each names who granted it (`by`: a user as `user:<name>`, or the node that recorded it) and when (`since`). |