Hi Steve,
In the absence of exclusionary mappings, permissions are
additive and the
highest permission applies *regardless of order*.
In the presence of exclusionary mappings, the order is
significant, and it
is wise to put the super entry last in case a super user is
excluded in a
previous rule.
you're right, I found this in the manual, too. I was not aware of that P4
has two different "modes" interpreting the access rights. IMHO at least a
hint should also be written in the "p4 help protect" and the man page. I was
once bitten by "excluding all administrators" accidently.
Greetings,
Jorg
BTW: Yes, I recognized, that there are no "two modes" and I am aware of that
the algorithm behaves additive and order has no meaning with the absence of
exclusions.