Skip to content

Commit

Permalink
Update Standards/scs-0302-w1-domain-manager-implementation-notes.md
Browse files Browse the repository at this point in the history
Co-authored-by: josephineSei <[email protected]>
Signed-off-by: Markus Hentsch <[email protected]>
  • Loading branch information
2 people authored and gtema committed Nov 6, 2024
1 parent 9cc2d6d commit ea52a73
Showing 1 changed file with 0 additions and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -133,7 +133,6 @@ The only parts of the policy definitions below that may be changed are:
"identity:revoke_grant": "(rule:domain_manager_grant and rule:is_domain_managed_role) or rule:base_revoke_grant or rule:admin_required"
"identity:list_role_assignments": "(rule:is_domain_manager and token.domain.id:%(target.domain_id)s) or rule:base_list_role_assignments or rule:admin_required"


# allow domain managers to manage groups within their domain
"identity:list_groups": "(rule:is_domain_manager and token.domain.id:%(target.group.domain_id)s) or (role:reader and system_scope:all) or rule:base_list_groups or rule:admin_required"
"identity:get_group": "(rule:is_domain_manager and token.domain.id:%(target.group.domain_id)s) or (role:reader and system_scope:all) or rule:base_get_group or rule:admin_required"
Expand Down

0 comments on commit ea52a73

Please sign in to comment.