Clarified secret role permissions

This commit is contained in:
Jeremy Stretch 2016-07-06 17:45:08 -04:00
parent edde021c85
commit c19124fcac

View File

@ -20,6 +20,8 @@ Each secret is assigned a functional role which indicates what it is used for. T
* IKE key strings
* Routing protocol shared secrets
Roles are also used to control access to secrets. Each role is assigned an arbitrary number of groups and/or users. Only the users associated with a role have permission to decrypt the secrets assigned to that role. (A superuser has permission to decrypt all secrets, provided they have an active user key.)
---
# User Keys