It seems there are two different meanings (or aspects) of inheritance: 1. If you are allowed to do something in a compartment, you are allowed to do it in descendant compartments. 2. Policy granting you permission to do something in a compartment may be attached to an ancestor compartment. These are subtly different and should be clearly stated. Relatedly: 3. Policy granting permission in a compartment MUST be attached either to that compartment or an ancestor.
@cryonixpod365
4 жыл бұрын
If I have to mention A:B:C:D:E:F to apply a policy upto the compartment F then how do inheritance work? Isn't all the policies applied to compartment A should be inherited by all th way through F?? Yes if the policy attached to the compartment A then only A-admins can delete/modify it but the policy should be effective upto Compartment F right?? I am a bit confused here.
@abhikbanerjee3719
4 жыл бұрын
If I specify a restrictive (eg. verb Inspect) policy to the root for some Group and Resource family and then in the child/sub compartment specify a more open (eg. verb Use) policy for the same group and resource, which policy takes effect at the child level? Also, what happens when the verbs are reversed?
Пікірлер: 3