[directory-site] branch master updated: minor

[sm...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

smckinney pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/directory-site.git


The following commit(s) were added to refs/heads/master by this push:
     new cc36cbda minor
cc36cbda is described below

commit cc36cbdaf6493238cc6013798f68296339bc495e
Author: Shawn McKinney <sm...@symas.com>
AuthorDate: Sun Sep 10 07:21:29 2023 -0500

    minor
---
 source/fortress/user-guide/4.35-create-session-role-constraint.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/source/fortress/user-guide/4.35-create-session-role-constraint.md b/source/fortress/user-guide/4.35-create-session-role-constraint.md
index 4902dc8c..38941947 100644
--- a/source/fortress/user-guide/4.35-create-session-role-constraint.md
+++ b/source/fortress/user-guide/4.35-create-session-role-constraint.md
@@ -8,17 +8,19 @@ navUpText: 4 - Fortress Code Samples
 
 # 4.35 - Create Session Role Constraint
 
+## An example of combining limited ABAC capability with standard RBAC.
+
 ```java
 Session createSession( User user, List<RoleConstraint> constraints, boolean isTrusted ) throws SecurityException
 ```
 
-Perform user authentication and role activations in one method plus additional constraints for evaluation during role activation.
+Perform user authentication and role activations in one method plus additional attribute constraints for evaluation.
 This method must be called once per user prior to calling other methods within this class. The successful result is Session that contains target user's RBAC roles.
 In addition to checking user password validity it will apply configured password policy checks.
 
 Parameters:
 - user - Contains User.userId, User.password (optional if isTrusted is 'true'), optional User.roles, optional User.adminRoles
-- constraints - list of key-value pairs, bound for role activation checks. 
+- constraints - list of key-value pairs bound for role activation checks. 
 - isTrusted - For Single-sign-on scenarios. if true, password is not required.
 
 Returns: