X-Git-Url: https://gerrit.automotivelinux.org/gerrit/gitweb?a=blobdiff_plain;f=docs%2Fpermissions.md;h=09f68a34ca0a497a616fa72921ad0dc4e704c9d5;hb=a069be3d476bbdaa56ce4750c8868b4f0682564a;hp=407fdc228a4b1af5fdcaaeb04e58e66b28956aa7;hpb=b6afa1aa893544b459cb767cc5a2ad8d2148228c;p=src%2Fapp-framework-main.git diff --git a/docs/permissions.md b/docs/permissions.md index 407fdc2..09f68a3 100644 --- a/docs/permissions.md +++ b/docs/permissions.md @@ -14,15 +14,15 @@ framework to keep installed permissions in a database. The permission names are [URN][URN] of the form: - urn:AGL:permission::: + urn:AGL:permission::: where "AGL" is the NID (the namespace identifier) dedicated to AGL (note: a RFC should be produced to standardize this name space). The permission names are made of NSS (the namespace specific string) starting with "permission:" and followed by colon separated -fields. The 2 first fields are and and the remaining -fields are grouped to form the . +fields. The 2 first fields are `` and `` and the remaining +fields are grouped to form the ``. ::= [ ] @@ -32,30 +32,35 @@ fields are grouped to form the . ::= "-" | "." | "_" | "@" -The field can be made of any valid character for NSS except +The field `` can be made of any valid character for NSS except the characters colon and star (:*). This field designates the api providing the permission. This scheme is used to deduce binding requirements -from permission requirements. The field can be the empty +from permission requirements. The field `` can be the empty string when the permission is defined by the AGL system itself. -The field if starting with the character "@" represents +The field `` if starting with the character "@" represents a transversal/cross permission not bound to any binding. ::= 1* -The field is made only of letters in lower case. -The field can only take some predefined values: -"system", "platform", "partner", "tiers", "owner", "public". +The field `` is made only of letters in lower case. +The field `` can only take some predefined values: + + - system + - platform + - partner + - tiers + - owner + - public + +The field `` is made of `` separated +by colons. ::= 0*(":" ) -The field is made separated by -colons. The names at left are hierarchically grouping the +The names at left are hierarchically grouping the names at right. This hierarchical behaviour is intended to be used to request permissions using hierarchical grouping. -Permission's level ------------------- - [URN]: https://tools.ietf.org/rfc/rfc2141.txt "RFC 2141: URN Syntax"