introduce the viewAccess global capability. This capability can be assigned separately so users can run check.access without having to be admin. Change-Id: I29a7c8d637a606ce9f7cf353ba242b1c43c2682b
diff --git a/Documentation/access-control.txt b/Documentation/access-control.txt index 72e309a..397b99a 100644 --- a/Documentation/access-control.txt +++ b/Documentation/access-control.txt
@@ -1380,6 +1380,13 @@ link:cmd-stream-events.html[stream Gerrit events via ssh]. +[[capability_viewAccess]] +=== View Access + +Allow checking access rights for arbitrary (user, project) pairs, +using the link:rest-api-projects.html#check-access[check.access] +endpoint + [[capability_viewAllAccounts]] === View All Accounts
