Update scriptExecution.runAsRef documentation

Evolveum · Jun 2, 2020 · 47ade77 · 47ade77
1 parent abe6b2a
commit 47ade77
Showing 1 changed file with 9 additions and 8 deletions.
diff --git a/infra/schema/src/main/resources/xml/ns/public/common/common-policy-3.xsd b/infra/schema/src/main/resources/xml/ns/public/common/common-policy-3.xsd
@@ -2082,18 +2082,19 @@
                         <xsd:annotation>
                             <xsd:documentation>
                                 <p>
-                                Reference to the user whose identity will be used to execute the script,
-                                including search for relevant objects and/or task submission in case of
-                                asynchronous execution.
+                                    Reference to the user whose identity will be used to execute the script,
+                                    including task submission in case of asynchronous execution.
+                                    (Note that search for relevant objects is currently done directly via repository,
+                                    so it is not covered by authorizations.)
                                 </p>
                                 <p>
-                                The whole process will use authorizations that this user has. If the script
-                                triggers any change then the change will be audited under the identity of
-                                this user.
+                                    The whole process will use authorizations that this user has. If the script
+                                    triggers any change then the change will be audited under the identity of
+                                    this user.
                                 </p>
                                 <p>
-                                If no user is specified then the identify of currently logged-in user or
-                                the owner of the task will be used.
+                                    If no user is specified then the identify of currently logged-in user or
+                                    the owner of the task will be used.
                                 </p>
                             </xsd:documentation>
                             <xsd:appinfo>