gsadmin/garage-ui
1
0
Fork 0
mirror of https://github.com/Noooste/garage-ui.git synced 2026-08-21 01:56:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs: improve clarity and structure

Browse Source
This commit is contained in:
Noooste
2026-07-11 22:53:40 +02:00
parent 90dffe594a
commit 477b544be7
3 changed files with 82 additions and 94 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config.example.yaml
+3 -3
View File
@@ -102,11 +102,11 @@ auth:
cookie_http_only: true
cookie_same_site: "lax" # lax, strict, none
# Optional: team-based access control (issue #33).
# Absent -> every authenticated user has full access (historical behavior).
# Optional: team-based access control (see docs/access-control.md).
# Absent -> every authenticated user has full access.
# Present -> default-deny: OIDC users get only what their teams grant; users
# matching no team get 403 everywhere. admin_role users, admin
# password logins, and token logins are always full-admin in v1.
# password logins, and token logins are always full-admin.
# NOTE: this is UI-layer policy, NOT a security boundary. Anyone holding the
# Garage admin token or S3 keys bypasses it entirely.
#