summaryrefslogtreecommitdiff
path: root/old-docs/syntax-allow-deny.mdwn
diff options
context:
space:
mode:
Diffstat (limited to 'old-docs/syntax-allow-deny.mdwn')
-rw-r--r--old-docs/syntax-allow-deny.mdwn20
1 files changed, 20 insertions, 0 deletions
diff --git a/old-docs/syntax-allow-deny.mdwn b/old-docs/syntax-allow-deny.mdwn
new file mode 100644
index 0000000..c227abf
--- /dev/null
+++ b/old-docs/syntax-allow-deny.mdwn
@@ -0,0 +1,20 @@
+Lace - Syntax of Allow and Deny statements
+==========================================
+
+These access control statements start `allow` or `deny`, followed by a single
+token reason to be returned to the caller (thus the reason should be quoted if
+it contains spaces), followed by zero or more definition names, all of which
+must pass for the statement to execute.
+
+For example:
+
+ allow "Administrators can do anything" is-admin
+ deny "Plebs may do nothing" is-pleb
+
+ allow ''
+
+As with definitions, includes, etc, if rule names are prefixed with an
+exclamation point then their sense is inverted, e.g.
+
+ deny "Only admins may alter hooks" altering-hooks !is-admin
+