[ARVADOS] updated: 2.1.0-967-g5726e94f3

[Git user]

Summary of changes:
 doc/admin/restricting-upload-download.html.textile.liquid | 2 ++
 1 file changed, 2 insertions(+)

       via  5726e94f389f4ee696a551e5222ddea93c029f76 (commit)
      from  85d86b801817958117db0a39f35d70f1a1f36ea7 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.


commit 5726e94f389f4ee696a551e5222ddea93c029f76
Author: Peter Amstutz <peter.amstutz at curii.com>
Date:   Fri Jun 18 12:58:52 2021 -0400

    17464: Add note about special case involving sharing links
    
    Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz at curii.com>

diff --git a/doc/admin/restricting-upload-download.html.textile.liquid b/doc/admin/restricting-upload-download.html.textile.liquid
index 6983e413f..8d5c9f544 100644
--- a/doc/admin/restricting-upload-download.html.textile.liquid
+++ b/doc/admin/restricting-upload-download.html.textile.liquid
@@ -33,6 +33,8 @@ The default policy allows anyone to upload or download.
           Upload: true
 </pre>
 
+If you create a sharing link as an admin user, and then give someone the token from the sharing link to download a file using @arv-get@, because the downloader is anonymous, the download permission will be restricted based on the "User" role and not the "Admin" role.
+
 h2. WebDAV and S3 API Permissions
 
 Permitting @WebDAV@ makes it possible to use WebDAV, S3 API, download from Workbench 1, and upload/download with Workbench 2.  It works in terms of individual files.  It prints a log each time a user uploads or downloads a file.  When @WebDAVLogEvents@ (default true) is enabled, it also adds an entry into the API server @logs@ table.

-----------------------------------------------------------------------


hooks/post-receive
--