move inheritance section / remove redundant general text

[pve-docs.git] / pveum.adoc

diff --git a/pveum.adoc b/pveum.adoc
index 9addcb7bc8827abfa77b81c0138e6ea24b52078c..e351491fabc76240335e88e820fc703bc42ea2fa 100644 (file)
--- a/pveum.adoc
+++ b/pveum.adoc
@@ -309,20 +309,6 @@ Some examples are:
 * `/access/realms/{realmid}`: Administrative access to realms
 
 
-Permissions
-~~~~~~~~~~~
-
-Permissions are the way we control access to objects. In technical
-terms they are simply a triple containing `<path,user,role>`. This
-concept is also known as access control lists. Each permission
-specifies a subject (user or group) and a role (set of privileges) on
-a specific path.
-
-When a subject requests an action on an object, the framework looks up
-the roles assigned to that subject (using the object path). The set of
-roles defines the granted privileges.
-
-
 Inheritance
 ^^^^^^^^^^^