lib/conjur/command/roles.rb in conjur-cli-4.7.3 vs lib/conjur/command/roles.rb in conjur-cli-4.7.4
- old
+ new
@@ -50,21 +50,21 @@
role = api.role(id)
puts role.exists?
end
end
- desc "Lists role memberships"
+ desc "Lists role memberships. The role membership list is recursively expanded."
arg_name "role"
command :memberships do |c|
c.action do |global_options,options,args|
roleid = args.shift
role = roleid.nil? && api.current_role || api.role(roleid)
display role.all.map(&:roleid)
end
end
- desc "Lists all members of the role"
+ desc "Lists all direct members of the role. The membership list is not recursively expanded."
arg_name "role"
command :members do |c|
c.desc "Verbose output"
c.switch [:V,:verbose]
@@ -100,10 +100,10 @@
role.grant_to member, grant_options
puts "Role granted"
end
end
- desc "Revoke a role from another role."
+ desc "Revoke a role from another role. You must have admin permission on the revoking role."
arg_name "role member"
command :revoke_from do |c|
c.action do |global_options,options,args|
id = require_arg(args, 'role')
member = require_arg(args, 'member')
\ No newline at end of file