AWS res documentation change
Summary
Restructured content to clarify environment boundaries, added SSH permissions and desktop advanced settings documentation
Security assessment
Expanded documentation now includes SSH permissions and advanced desktop settings, which are security controls. This improves clarity around existing security features but does not address a specific vulnerability.
Diff
diff --git a/res/archive/release-minus-3/ug/permission-profiles-environment-boundaries.md b/res/archive/release-minus-3/ug/permission-profiles-environment-boundaries.md index 6df5871d1..fd80792f3 100644 --- a//res/archive/release-minus-3/ug/permission-profiles-environment-boundaries.md +++ b//res/archive/release-minus-3/ug/permission-profiles-environment-boundaries.md @@ -5 +5 @@ -# Environment Boundaries +# Environment boundaries @@ -7 +7 @@ -Environment boundaries allow administrators to configure permissions that will take effect globally for all users. This includes permissions such as File Browser access and Desktop Permissions. +Environment boundaries allow Research and Engineering Studio (RES) administrators to configure permissions that will take effect globally for all users. This includes permissions such as **File Browser and SSH permissions** , **Desktop Permissions** , and **Desktop advanced settings**. @@ -9,11 +9 @@ Environment boundaries allow administrators to configure permissions that will t - - -**Configuring File browser access** - -Administrators can toggle **Access data** on or off under **File browser permissions**. If **Access data** is turned off, users will not see **File Browser** navigation in their web portal and cannot upload or download data attached to their global file system. When **Access data** is enabled, users have access to **File Browser** navigation in their web portal which allows them to upload or download data that is attached to their global file system. - -When the **Access data** feature is turned on and then later turned off, users who are already logged in to the web portal will be unable to upload or download files, even if they are on the corresponding page. Additionally, the navigation menu will disappear when they refresh the page. - -**Configuring Desktop Permissions** - -Administrators can toggle **Desktop permissions** on or off to globally manage the VDI functionality of all owners. All of these permissions, or a subset, can be used to create **Desktop sharing profiles** that determine which actions can be performed by users with whom a desktop is shared. If any desktop permission is disabled, this will automatically disable the corresponding permissions in the **Desktop sharing profiles**. These permissions will be labeled as "Disabled Globally". Even if the administrator enables this desktop permission again, the permission in the desktop sharing profile will remain disabled until the administrator manually enables it. + @@ -29 +19 @@ Default permissions profiles -Desktop sharing profiles +Configuring File browser access