#4969: Remove user and group assignment from SecretRole

This commit is contained in:
Jeremy Stretch
2020-08-07 16:19:18 -04:00
parent 68d89090bf
commit f5c03319b1
13 changed files with 93 additions and 117 deletions

View File

@@ -7,5 +7,3 @@ Each secret is assigned a functional role which indicates what it is used for. S
* RADIUS/TACACS+ keys
* IKE key strings
* Routing protocol shared secrets
Roles are also used to control access to secrets. Each role is assigned an arbitrary number of groups and/or users. Only the users associated with a role have permission to decrypt the secrets assigned to that role. (A superuser has permission to decrypt all secrets, provided they have an active user key.)