Bug 1017811

Summary: Text incomplete and small rewording suggested in the "Scoped Roles" chapter
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Ladislav Thon <lthon>
Component: DocumentationAssignee: Dana Mison <dmison>
Status: CLOSED CURRENTRELEASE QA Contact: Ladislav Thon <lthon>
Severity: high Docs Contact:
Priority: unspecified    
Version: 6.2.0   
Target Milestone: GA   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Build Name: 14874, Administration and Configuration Guide-6.2-1 Build Date: 10-10-2013 14:56:59 Topic ID: 23149-541286 [Latest]
Last Closed: 2013-12-17 01:01:12 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 1013506    

Description Ladislav Thon 2013-10-10 14:34:03 UTC
Title: Scoped Roles

Describe the issue:

Besides the fact that the text of this chapter is incomplete ("common use cases" missing), I'd suggest a small rewording in these sentences:

1. "Scoped roles allow users can be granted different permissions in different server groups and on different hosts."

2. "A role that is host-scoped restricts the permissions of that role to one or more host resources."

3. "This means access is provided to the relevant /host=*/ resource trees but sub-resources that are specific to other hosts are hidden."

4. "A role that is server-group-scoped restricts the permissions of that role to one or more server-group resources."

5. "Any sub-resources within any of those that are logically related to the server-group will not be visible to the user."

Suggestions for improvement:

1. "Scoped roles allow users to be granted different permissions in different server groups and on different hosts."

2. "A role that is host-scoped restricts the permissions of that role to one or more hosts."

3. "This means access is provided to the relevant /host=*/ resource trees but resources that are specific to other hosts are hidden."

4. "A role that is server-group-scoped restricts the permissions of that role to one or more server groups."

5. "Any sub-resources within any of those that are not logically related to the server-group will not be visible to the user."

1 and 5 are IMHO important for understanding. 2, 3 and 4 are probably nothing more than nitpicking.