Loading docs/ROLES.md +5 −0 Changes for docs/ROLES.md: 5 added lines, 0 removed lines. Original line number Diff line number Diff line Loading @@ -65,6 +65,11 @@ Plus two more for managing per-domain DKIM signing keys (`/api/v1/security/dkim- than `smtp.*` since it's `proxyplus.security_admin`'s resource, not `proxyplus.smtp_admin`'s: `security.dkim.read`, `security.dkim.write`. Plus two more for bulk config export/import (`/api/v1/config/export`, `/api/v1/config/import`) -- a single call touches every resource type above at once (routes, pools, relays, TLS profiles, DKIM keys), so it's gated as privileged as `admin.roles.manage` rather than any one resource's own permission: `admin.config.read`, `admin.config.write`. `scripts/authdb-bootstrap.sh` legt für jede dieser Berechtigungen eine GPO an und trägt die Standardrollen-Gruppen als `allowed`-Mitglieder ein (z. B. `proxyplus.super_admin` in allen GPOs, `proxyplus.smtp_admin` in allen `smtp.*`-GPOs). Loading Loading
docs/ROLES.md +5 −0 Changes for docs/ROLES.md: 5 added lines, 0 removed lines. Original line number Diff line number Diff line Loading @@ -65,6 +65,11 @@ Plus two more for managing per-domain DKIM signing keys (`/api/v1/security/dkim- than `smtp.*` since it's `proxyplus.security_admin`'s resource, not `proxyplus.smtp_admin`'s: `security.dkim.read`, `security.dkim.write`. Plus two more for bulk config export/import (`/api/v1/config/export`, `/api/v1/config/import`) -- a single call touches every resource type above at once (routes, pools, relays, TLS profiles, DKIM keys), so it's gated as privileged as `admin.roles.manage` rather than any one resource's own permission: `admin.config.read`, `admin.config.write`. `scripts/authdb-bootstrap.sh` legt für jede dieser Berechtigungen eine GPO an und trägt die Standardrollen-Gruppen als `allowed`-Mitglieder ein (z. B. `proxyplus.super_admin` in allen GPOs, `proxyplus.smtp_admin` in allen `smtp.*`-GPOs). Loading
