acl: document Admin and NoAccess a bit

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

diff --git a/src/config/acl.rs b/src/config/acl.rs
index c5d5dd5fdd0f20dc7f6bcd66f885587ce0724029..d31c7a8545e34b3f37d7fc5f895793aee185681d 100644 (file)
--- a/src/config/acl.rs
+++ b/src/config/acl.rs
@@ -47,7 +47,11 @@ constnamemap! {
 }
 
 
+/// Admin always has all privileges. It can do everything except a few actions
+/// which are limited to the 'root@pam` superuser
 pub const ROLE_ADMIN: u64 = std::u64::MAX;
+
+/// NoAccess can be used to remove privileges from specific paths
 pub const ROLE_NO_ACCESS: u64 = 0;
 
 pub const ROLE_AUDIT: u64 =