permgap

Overview ¶

Package permgap tells administrators about the saved roles that allow a permission but not the one carved out of it (perm/gaps.go): adding files but not encrypting, as a save on a version without files.encrypt leaves them.

Once per new gap, never at every start: the gaps administrators were told of are recorded (perm.AnnounceGaps), and the bell rings again only when one they were not told of opens - after a start that finds a role an older version saved, or after a save through the API that never showed the key. A gap given back or dismissed leaves the record, so it is told again should it ever open again.

Who is told is who can act on Admin -> Roles: the administrators nobody confines read every gap (one broadcast), and a tenant's administrators are told about their tenant's own custom roles (one notification each). The built-in roles are the platform operator's alone.