Index: appengine/config_service/README.md |
diff --git a/appengine/config_service/README.md b/appengine/config_service/README.md |
index 64a65d68bad51ba8de169101dbb4bd69420fc5c2..d9d4e77649ee1d8af990f4be4b0feaca1738b08b 100644 |
--- a/appengine/config_service/README.md |
+++ b/appengine/config_service/README.md |
@@ -90,6 +90,13 @@ There are three types of configs: |
Ref configs live in `projects/<project_id>/<ref_name>` config |
set, where `<ref_name>` always starts with `refs/`. |
+## Access control |
+ |
+Service configs are accessible to a group defined in service/luci-config:acl.cfg |
+and a GAE app with the same id, e.g. x.appspot.com has access to `services/x`. |
Sergiy Byelozyorov
2015/07/07 22:48:07
can we make this configurable please? e.g. cq serv
|
+ |
+Projects define access to their configs in projects/foo:project.cfg. See |
+[access field in ProjectCfg message](proto/project_config.proto). |
## GAE component |