Skip to content

Commit

Permalink
Update documentation re: 'delegated' permissions
Browse files Browse the repository at this point in the history
  • Loading branch information
@yndajas
yndajas committed Oct 1, 2024
1 parent 4f546b7 commit ac06c21
Showing 1 changed file with 8 additions and 8 deletions.
16 changes: 8 additions & 8 deletions docs/access_and_permissions.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ The granter is either:
- a GOV.UK admin, meaning a user with the role "Superadmin" or "Admin"; or
- a publishing manager, meaning a user with the role "Super organisation admin" or "Organisation admin"

Each row represents an app with certain permissions set as delegatable, as indicated by the "Delegatable permissions" column. The "Grant access" column indicates whether a granter can give a grantee the `signin` permission, and the "Revoke access" column relates to removing the `signin` permission.
Each row represents an app with certain permissions set as delegated, as indicated by the "Delegated permissions" column. The "Grant access" column indicates whether a granter can give a grantee the `signin` permission, and the "Revoke access" column relates to removing the `signin` permission.

### Dependencies by route

Expand All @@ -27,21 +27,21 @@ In this section, the granter and grantee are the same user: this is about managi

#### As a GOV.UK admin

| Delegatable permissions | Grant access | Revoke access | Edit permissions | View permissions |
| Delegated permissions | Grant access | Revoke access | Edit permissions | View permissions |
| ----------------------- | ------------ | ------------- | ---------------- | ---------------- |
| None | ✅ | ✅ | ✅ | ✅ |
| `signin` | ✅ | ✅ | ✅ | ✅ |
| Another permission | ✅ | ✅ | ✅ | ✅ |

#### As a publishing manager

| Delegatable permissions | Grant access | Revoke access | Edit permissions | View permissions |
| Delegated permissions | Grant access | Revoke access | Edit permissions | View permissions |
| ----------------------- | ------------ | ------------- | ---------------- | ---------------- |
| None | ❌ | ❌ | ❌ | ✅ |
| `signin` | ❌ | ✅ | ❌ | ✅ |
| Another permission | ❌ | ❌ | ✅\* | ✅ |

\* only delegatable non-signin permissions
\* only delegated non-signin permissions

### Dependencies by route

Expand Down Expand Up @@ -186,7 +186,7 @@ In this section, the granter and grantee are different users: this is about mana

##### With or without access to the app

| Delegatable permissions | Grant access | Revoke access | Edit permissions | View permissions |
| Delegated permissions | Grant access | Revoke access | Edit permissions | View permissions |
| ----------------------- | ------------ | ------------- | ---------------- | ---------------- |
| None | ✅ | ✅ | ✅ | ✅ |
| `signin` | ✅ | ✅ | ✅ | ✅ |
Expand All @@ -196,17 +196,17 @@ In this section, the granter and grantee are different users: this is about mana

##### With access to the app

| Delegatable permissions | Grant access | Revoke access | Edit permissions | View permissions |
| Delegated permissions | Grant access | Revoke access | Edit permissions | View permissions |
| ----------------------- | ------------ | ------------- | ---------------- | ---------------- |
| None | ❌ | ❌ | ❌ | ✅ |
| `signin` | ✅ | ✅ | ❌ | ✅ |
| Another permission | ❌ | ❌ | ✅\* | ✅ |

\* only delegatable non-signin permissions
\* only delegated non-signin permissions

##### Without access to the app

| Delegatable permissions | Grant access | Revoke access | Edit permissions | View permissions |
| Delegated permissions | Grant access | Revoke access | Edit permissions | View permissions |
| ----------------------- | ------------ | ------------- | ---------------- | ---------------- |
| None | ❌ | ❌ | ❌ | ✅ |
| `signin` | ❌ | ❌ | ❌ | ✅ |
Expand Down

0 comments on commit ac06c21

Please sign in to comment.