Closed vondruska closed 10 years ago
thanks @vondruska!
I'm just wondering, this functionality is supposed to work then you have user user
and role *
, why wouldn't that work for you?
You make a valid point, and upon more inspection that does work. But that seems really confusing to me. I saw it as "allow all users and allow users in role 'Admin'" which really wouldn't help anything since all users were allowed. Not "allow all users in the role Administrator".
I was putting a blank value into the allowedUsers
field, and putting my allowed roles in the allowedRoles
field, which caused this confusion and thus pull request.
great it's clear at the very end :)
This allows the implementer to permit a role without needing to have an explicit list of usernames accompanying the role.