fix up some IAM comments (#5972)

oxidecomputer · Jun 28, 2024 · 653964b · 653964b
1 parent e514bc8
commit 653964b
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/nexus/auth/src/authz/mod.rs b/nexus/auth/src/authz/mod.rs
@@ -106,7 +106,7 @@
 //! | | | +---------------+-----------+-------------+-------------+---+      |
 //! | | | | resource_type | role_name | resource_id | identity_id |...|      |
 //! | | | +---------------+-----------+-------------+-------------+---+      |
-//! | | | | "project "    | "viewer"  |         234 |          123|...|      |
+//! | | | | "project "    | "viewer"  |         123 |         234 |...|      |
 //! | | | +--^------------+--^--------+----------^--+-----------^-+---+      |
 //! | | |    |               |                   |              |            |
 //! +-|-|----+               |                   |              +------------+

diff --git a/nexus/types/src/external_api/views.rs b/nexus/types/src/external_api/views.rs
@@ -870,8 +870,8 @@ pub struct Group {
 
 /// View of a Built-in User
 ///
-/// A Built-in User is explicitly created as opposed to being derived from an
-/// Identify Provider.
+/// Built-in users are identities internal to the system, used when the control
+/// plane performs actions autonomously
 #[derive(ObjectIdentity, Clone, Debug, Deserialize, Serialize, JsonSchema)]
 pub struct UserBuiltin {
     // TODO-correctness is flattening here (and in all the other types) the

diff --git a/openapi/nexus.json b/openapi/nexus.json
@@ -19826,7 +19826,7 @@
         ]
       },
       "UserBuiltin": {
-        "description": "View of a Built-in User\n\nA Built-in User is explicitly created as opposed to being derived from an Identify Provider.",
+        "description": "View of a Built-in User\n\nBuilt-in users are identities internal to the system, used when the control plane performs actions autonomously",
         "type": "object",
         "properties": {
           "description": {