summaryrefslogtreecommitdiff
path: root/doc/syntax-allow-deny.mdwn
blob: c227abf5d3ad459b6d872b5d54a57a5354335451 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
Lace - Syntax of Allow and Deny statements
==========================================

These access control statements start `allow` or `deny`, followed by a single
token reason to be returned to the caller (thus the reason should be quoted if
it contains spaces), followed by zero or more definition names, all of which
must pass for the statement to execute.

For example:

    allow "Administrators can do anything" is-admin
    deny "Plebs may do nothing" is-pleb
    
    allow ''

As with definitions, includes, etc, if rule names are prefixed with an
exclamation point then their sense is inverted, e.g.

    deny "Only admins may alter hooks" altering-hooks !is-admin