next up previous
Next: Implementation Up: Specification Previous: Special Rights

Lifetime Limits

All compatibility, Admin Roles and Assign Roles settings have an optional time-to-live parameter. After the given time, the set of requests for a type compatibility setting gets cleared by the system, while compatible, admin or assign roles get removed from their set.

With lifetime limits, temporary additional rights do not require manual action to be revoked and thus avoid this typical situation of unnecessary permanent rights. Certainly, time-to-live settings rely on the correct system time to be always maintained.

Amon Ott