[arvados] updated: 2.1.0-3080-gd15a1d018

[git repository hosting]

Summary of changes:
 doc/api/permission-model.html.textile.liquid | 1 +
 1 file changed, 1 insertion(+)

       via  d15a1d018bf660be8a73b72195d7bddb19318116 (commit)
      from  2eb88069ea1a778e2a748e4d05244d31912398fa (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.


commit d15a1d018bf660be8a73b72195d7bddb19318116
Author: Tom Clegg <tom at curii.com>
Date:   Thu Nov 24 14:54:43 2022 -0500

    19513: Note configurable permission on doc section about roles.
    
    Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom at curii.com>

diff --git a/doc/api/permission-model.html.textile.liquid b/doc/api/permission-model.html.textile.liquid
index 1b3b6bb86..d7d5eabd0 100644
--- a/doc/api/permission-model.html.textile.liquid
+++ b/doc/api/permission-model.html.textile.liquid
@@ -78,6 +78,7 @@ A "role" is a subtype of Group that is treated in Workbench as a group of users
 * The name of a role is unique across a single Arvados cluster.
 * Roles can be both targets (@head_uuid@) and origins (@tail_uuid@) of permission links.
 * By default, all roles are visible to all active users. However, if the configuration entry @Users.RoleGroupsVisibleToAll@ is @false@, visibility is determined by normal permission rules, _i.e._, a role is only visible to users who have that role, and to admins.
+* By default, any user can create a new role. However, if the configuration entry @Users.CreateRoleGroups@ is @false@, only admins can create roles.
 
 h3. Access through Roles
 

-----------------------------------------------------------------------


hooks/post-receive
--