Commit 7077dc31 authored by Karl O. Pinc's avatar Karl O. Pinc Committed by Ondřej Kuzník
Browse files

Better explanation of when access control processing stops

parent 2b402a5f
......@@ -95,6 +95,8 @@ clause matches the accessor's properties, its
and
.B <control>
clauses are evaluated.
.LP
Access control checking stops at the first match of the
.B <what>
and
......@@ -110,8 +112,26 @@ clause list is implicitly terminated by a
by * none stop
.fi
.LP
clause that results in stopping the access control with no access
privileges granted.
.B <control>
clause. This implicit
.B <control>
stops access directive evaluation with no more access privileges
granted to anyone else.
To stop access directive evaluation only when both
.B <who>
and
.B <what>
match, add an explicit
.LP
.nf
by * break
.fi
.LP
to the end of the
.B <who>
clause list.
.LP
Each
.B <what>
clause list is implicitly terminated by a
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment