summaryrefslogtreecommitdiff
path: root/doc/syntax-allow-deny
blob: 094352bbf5011ad5cb882c4a31452a9fd33456c5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
Syntax of Allow and Deny statements
-----------------------------------

These access control statements start 'allow' or 'deny', followed by a
single token reason to be returned to the caller, followed by zero or
more definitions, all of which must pass for the statement to execute.

allow "Administrators can do anything" is-admin
deny "Plebs may do nothing" is-pleb

allow ''

As with definitions, includes, etc, if rule names are prefixed with an
exclamation point then their sense is inverted, e.g.

deny "Only admins may alter hooks" altering-hooks !is-admin