doc: correct implicit ACL permissions volume owner

OpenAFS changed the behavior of implicit administrator permission
for directory ownership.  In OpenAFS only the volume root directory
owner has implicit administrator permissions and they apply to all
directories in the volume not just those with matching ownership.

Change-Id: I8ca0a8874fe17cf7fc575107bd76efb5dc472b10
Reviewed-on: http://gerrit.openafs.org/6951
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Jeffrey Altman <jaltman@secure-endpoints.com>
Tested-by: Jeffrey Altman <jaltman@secure-endpoints.com>
Reviewed-by: Derrick Brashear <shadow@dementix.org>

diff --git a/doc/xml/AdminGuide/auagd020.xml b/doc/xml/AdminGuide/auagd020.xml
index f016b73..61c5c2d 100644 (file)
--- a/doc/xml/AdminGuide/auagd020.xml
+++ b/doc/xml/AdminGuide/auagd020.xml
@@ -309,17 +309,19 @@
               <term><emphasis role="bold">The a (administer) permission</emphasis></term>
 
               <listitem>
-                <para>This permission enables a user to change the directory's ACL. Members of the <emphasis
-                role="bold">system:administrators</emphasis> group implicitly have this permission on every directory (that is, even
-                if that group does not appear on the ACL). Similarly, the owner of a directory implicitly has this permission on its
-                ACL and those of all directories below it that he or she owns. <indexterm>
+                <para>This permission enables a user to change the directory's ACL. Members of the
+                    <emphasis role="bold">system:administrators</emphasis> group implicitly have
+                  this permission on every directory (that is, even if that group does not appear on
+                  the ACL). Similarly, the owner of a volume root directory implicitly has this
+                  permission on its ACL and those of all directories within the volume. <indexterm>
                     <primary>administer ACL permission</primary>
-
-                    <secondary></secondary>
-
+                    <secondary/>
                     <see>a ACL permission</see>
-                  </indexterm> <indexterm>
+                  </indexterm>
+                  <indexterm>
                     <primary>a ACL permission</primary>
+                  </indexterm><indexterm>
+                    <primary>implicit ACL permissions</primary>
                   </indexterm></para>
               </listitem>
             </varlistentry>

diff --git a/doc/xml/UserGuide/auusg007.xml b/doc/xml/UserGuide/auusg007.xml
index a6f7458..6c47f2c 100644 (file)
--- a/doc/xml/UserGuide/auusg007.xml
+++ b/doc/xml/UserGuide/auusg007.xml
@@ -192,12 +192,16 @@
             <term><emphasis role="bold">The a (administer) permission</emphasis></term>
 
             <listitem>
-              <para>This permission enables a user to change the directory's ACL. Members of the <emphasis
-              role="bold">system:administrators</emphasis> group implicitly have this permission on every directory (that is, even
-              if that group does not appear on the ACL). Similarly, the owner of a directory implicitly has this permission on its
-              ACL and those of all directories below it. <indexterm>
+              <para>This permission enables a user to change the directory's ACL. Members of the
+                  <emphasis role="bold">system:administrators</emphasis> group implicitly have this
+                permission on every directory (that is, even if that group does not appear on the
+                ACL). Similarly, the owner of a volume root directory implicitly has this permission
+                on its ACL and those of all directories within the volume. <indexterm>
                   <primary>administer ACL permission</primary>
-                </indexterm> <indexterm>
+                </indexterm><indexterm>
+                  <primary>implicit ACL permissions</primary>
+                </indexterm>
+                <indexterm>
                   <primary>a ACL permission</primary>
                 </indexterm></para>
             </listitem>