AWS res documentation change
Summary
Updated title case, added RES context, expanded permission scope to include SSH and advanced desktop settings, replaced image, and restructured content by removing detailed file browser/desktop explanations while adding new section headers.
Security assessment
The change documents enhanced permission controls (SSH permissions, desktop advanced settings) which are security features, but shows no evidence of addressing a specific vulnerability. The restructuring clarifies security boundary configurations without indicating a security incident.
Diff
diff --git a/res/archive/release-minus-4/ug/permission-profiles-environment-boundaries.md b/res/archive/release-minus-4/ug/permission-profiles-environment-boundaries.md index f8d945963..2e37aa282 100644 --- a//res/archive/release-minus-4/ug/permission-profiles-environment-boundaries.md +++ b//res/archive/release-minus-4/ug/permission-profiles-environment-boundaries.md @@ -5 +5 @@ -# Environment Boundaries +# Environment boundaries @@ -7 +7 @@ -Environment boundaries allow administrators to configure permissions that will take effect globally for all users. This includes permissions such as File Browser access and Desktop Permissions. +Environment boundaries allow Research and Engineering Studio (RES) administrators to configure permissions that will take effect globally for all users. This includes permissions such as **File Browser and SSH permissions** , **Desktop Permissions** , and **Desktop advanced settings**. @@ -9,11 +9 @@ Environment boundaries allow administrators to configure permissions that will t - - -**Configuring File browser access** - -Administrators can toggle **Access data** on or off under **File browser permissions**. If **Access data** is turned off, users will not see **File Browser** navigation in their web portal and cannot upload or download data attached to their global file system. When **Access data** is enabled, users have access to **File Browser** navigation in their web portal which allows them to upload or download data that is attached to their global file system. - -When the **Access data** feature is turned on and then later turned off, users who are already logged in to the web portal will be unable to upload or download files, even if they are on the corresponding page. Additionally, the navigation menu will disappear when they refresh the page. - -**Configuring Desktop Permissions** - -Administrators can toggle **Desktop permissions** on or off to globally manage the VDI functionality of all owners. All of these permissions, or a subset, can be used to create **Desktop sharing profiles** that determine which actions can be performed by users with whom a desktop is shared. If any desktop permission is disabled, this will automatically disable the corresponding permissions in the **Desktop sharing profiles**. These permissions will be labeled as "Disabled Globally". Even if the administrator enables this desktop permission again, the permission in the desktop sharing profile will remain disabled until the administrator manually enables it. + @@ -29 +19 @@ Default permissions profiles -Desktop sharing profiles +Configuring File browser access