Sep 10, 2024 · Jul 31, 2024 · Jul 31, 2024 · Jul 31, 2024 · Jul 31, 2024 · Aug 1, 2024
diff --git a/coderd/rbac/README.md b/coderd/rbac/README.md
 - `object` is any valid resource type.
 - `id` is any valid UUID v4.
 - `id` is included in the permission syntax, however only scopes may use `id` to specify a specific object.
 - `action` is `create`, `read`, `modify`, `delete`,or another verb.
 - `action` istypically`create`, `read`, `modify`, `delete`,but you can define other verbs as needed.

 ## Example Permissions

diff --git a/coderd/rbac/USAGE.md b/coderd/rbac/USAGE.md
    ...
 ```

 Entriesin the `frobulators` table be created/read/updated/deleted, so we define
 We need to create/read/update/delete rowsin the `frobulators` table, so we define
 those actions.

 `policy.go` is used to generate code in `coderd/rbac/object_gen.go`, and we can
 This shows you that the `org_auditor` role has `read` permissions on the
 frobulator, but no test case covered it.

 **NOTE: don't just add cases which make the tests pass; consider all theway in
 **NOTE: don't just add cases which make the tests pass; consider all theways in
 which your resource must be used, and test all of those scenarios!**

 # Database authorization
Original file line number	Diff line number	Diff line change
Expand Up		@@ -49,7 +49,7 @@ This can be represented by the following truth table, where Y represents _positi
		- `object` is any valid resource type.
		- `id` is any valid UUID v4.
		- `id` is included in the permission syntax, however only scopes may use `id` to specify a specific object.
		- `action` is `create`, `read`, `modify`, `delete`,or another verb.
		- `action` istypically`create`, `read`, `modify`, `delete`,but you can define other verbs as needed.

		## Example Permissions

Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -103,7 +103,7 @@ Let's now add our frobulator noun to `coderd/rbac/policy/policy.go`:
		...
		```

		Entriesin the `frobulators` table be created/read/updated/deleted, so we define
		We need to create/read/update/delete rowsin the `frobulators` table, so we define
		those actions.

		`policy.go` is used to generate code in `coderd/rbac/object_gen.go`, and we can
Expand DownExpand Up		@@ -288,7 +288,7 @@ FAIL
		This shows you that the `org_auditor` role has `read` permissions on the
		frobulator, but no test case covered it.

		**NOTE: don't just add cases which make the tests pass; consider all theway in
		**NOTE: don't just add cases which make the tests pass; consider all theways in
		which your resource must be used, and test all of those scenarios!**

		# Database authorization
Expand Down