summaryrefslogtreecommitdiff
path: root/docs
diff options
context:
space:
mode:
Diffstat (limited to 'docs')
-rw-r--r--docs/narr/security.rst3
1 files changed, 3 insertions, 0 deletions
diff --git a/docs/narr/security.rst b/docs/narr/security.rst
index aac435ada..48c88cbde 100644
--- a/docs/narr/security.rst
+++ b/docs/narr/security.rst
@@ -103,6 +103,9 @@ system-defined principal indicating, literally, everyone) is allowed
to view the blog, the ``group:editors`` principal is allowed to add to
and edit the blog.
+.. note:: Each tuple within the above ``__acl__`` structure is known
+ as a :term:`ACE`, which stands for "access control entry".
+
A principal is usually a user id, however it also may be a group id if
your authentication system provides group information and the security
policy is written to respect them. The