Next: Implementation
Up: Specification
Previous: Special Rights
All compatibility, Admin Roles and Assign Roles settings
have an optional time-to-live parameter. After the given time, the set of
requests for a type compatibility setting gets cleared by the
system, while compatible, admin or assign roles get removed from their set.
With lifetime limits, temporary additional rights do not require manual
action to be revoked and thus avoid this typical situation of
unnecessary permanent rights.
Certainly, time-to-live settings rely on the correct system time to be
always maintained.
Amon Ott