mirror of
https://github.com/sol1/rustguac.git
synced 2026-10-24 12:42:23 +00:00
Dave Kempe
492e329670
Documents the map-group subcommand in the group-to-role mappings section: creating a mapping, the one-mapping-per-group rule and the --force re-map, and that mappings are applied at the user's next OIDC login rather than immediately, which matters in both directions when revoking access. Documents the new cli_audit_log table: what is and is not recorded, that the actor prefers SUDO_USER so sudo names the person rather than root, that only successful actions are logged, how to read it with sqlite3, and the 90 day retention. Also corrects two pre-existing errors found while writing the above: - deployment-guide.md showed an [oidc.group_role_mappings] config table. No such config field exists, so anyone following the guide would add it and silently get no mappings at all. Replaced with the CLI commands that actually create them. The same block had session_ttl_secs under [oidc]; the real key is auth_session_ttl_secs and it is top level. - roles-and-access-control.md documented an enable-user subcommand that does not exist. Re-enabling is done from the Admin page or the API, so the doc now says that, with a warning about disabling your own account.