Add a note that ACLs don't operate at the auth level; Fix glob definition

pull/977/head
Travis Ralston 6 years ago
parent be2e0fc9d4
commit 82be6077ff

@ -22,6 +22,11 @@ description: |-
#. If the server name matches an entry in the ``allow`` list, allow. #. If the server name matches an entry in the ``allow`` list, allow.
#. Otherwise, deny. #. Otherwise, deny.
.. Note::
Server ACLs do not restrict the events relative to the room DAG via authorisation
rules, but instead act purely at the network layer to determine which servers are
allowed to connect and interact with a given room.
.. WARNING:: .. WARNING::
Failing to provide an ``allow`` rule of some kind will prevent **all** Failing to provide an ``allow`` rule of some kind will prevent **all**
servers from participating in the room, including the sender. This renders servers from participating in the room, including the sender. This renders
@ -51,7 +56,7 @@ properties:
description: |- description: |-
The server names to allow in the room, excluding any port information. The server names to allow in the room, excluding any port information.
Wildcards may be used to cover a wider range of hosts, where ``*`` Wildcards may be used to cover a wider range of hosts, where ``*``
matches zero or more characters and ``?`` matches one or more characters. matches zero or more characters and ``?`` matches exactly one character.
**This defaults to an empty list when not provided, effectively disallowing **This defaults to an empty list when not provided, effectively disallowing
every server.** every server.**
@ -62,7 +67,7 @@ properties:
description: |- description: |-
The server names to disallow in the room, excluding any port information. The server names to disallow in the room, excluding any port information.
Wildcards may be used to cover a wider range of hosts, where ``*`` Wildcards may be used to cover a wider range of hosts, where ``*``
matches zero or more characters and ``?`` matches one or more characters. matches zero or more characters and ``?`` matches exactly one character.
This defaults to an empty list when not provided. This defaults to an empty list when not provided.
items: items:

Loading…
Cancel
Save