Skip to content

Commit ac44f85

Browse files
comp64wouterj
authored andcommitted
Update description for Access decision strategies
Updated the description to reflect the current behavior of the builtin AccessDecisionManager.
1 parent 735f543 commit ac44f85

File tree

1 file changed

+8
-4
lines changed

1 file changed

+8
-4
lines changed

security/voters.rst

+8-4
Original file line numberDiff line numberDiff line change
@@ -278,12 +278,16 @@ There are three strategies available:
278278
This grants access as soon as there is *one* voter granting access;
279279

280280
``consensus``
281-
This grants access if there are more voters granting access than denying;
281+
This grants access if there are more voters granting access than
282+
denying. If case of a tie the decision is based on the
283+
``allow_if_equal_granted_denied`` config option (defaulting to ``true``);
282284

283285
``unanimous``
284-
This only grants access if there is no voter denying access. If all voters
285-
abstained from voting, the decision is based on the ``allow_if_all_abstain``
286-
config option (which defaults to ``false``).
286+
This only grants access if there is no voter denying access.
287+
288+
Regardless the chosen strategy, if all voters abstained from voting, the
289+
decision is based on the ``allow_if_all_abstain`` config option (which
290+
defaults to ``false``).
287291

288292
In the above scenario, both voters should grant access in order to grant access
289293
to the user to read the post. In this case, the default strategy is no longer

0 commit comments

Comments
 (0)