docs: Document that grant strings allow multiple ids (#5975)
* docs: Document that grant strings allow multiple ids * Update website/content/docs/configuration/identity-access-management/permission-grant-formats.mdx Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com> --------- Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
This commit is contained in:
1 parent
fdb665c86b
commit
91050dcd46
1 file changed
+9
-2
+9
-2
@@ -18,9 +18,10 @@ A grant string has a form similar to:
|
||||
|
||||
There are two types of selectors:
|
||||
|
||||
- An `id` field that indicates a specific resource or a wildcard to match all
|
||||
- An `ids` field that indicates a specific resource or a wildcard to match all.
|
||||
You can enter multiple comma-separated ID values in a grant string.
|
||||
- A `type` field that indicates a specific resource type or a wildcard to match
|
||||
all; this might also be used to grant permissions on collections of resources
|
||||
all; this might also be used to grant permissions on collections of resources.
|
||||
|
||||
Selectors are used to indicate the resources on which the grant should apply,
|
||||
using specific IDs or wildcard IDs and type selectors.
|
||||
@@ -44,6 +45,12 @@ to specify `create` or `list` as actions in this format, because this format
|
||||
explicitly identifies a resource.
|
||||
The `create` and `list` actions are only supported for collections.
|
||||
|
||||
You can enter multiple comma-separated ID values in a grant string:
|
||||
|
||||
`ids=hsst_1234567890,hsst_0987654321;actions=read,update`
|
||||
|
||||
This example grants the `read` and `update` actions to both resources `hsst_1234567890` and `hsst_0987654321`.
|
||||
|
||||
## Type only
|
||||
|
||||
You can configure a grant to allow the specified actions for a given type.
|
||||
|
||||
Reference in new issue
Block a user