doc: fix documentation to match intended behavior

diff --git a/libgsignon-glib/signon-identity.c b/libgsignon-glib/signon-identity.c
index 1b5aa43a976c211308c6f2b332d4019880760456..acd8b7883fc482b7bccb7d8c1c77be34b3782856 100644 (file)
--- a/libgsignon-glib/signon-identity.c
+++ b/libgsignon-glib/signon-identity.c
@@ -82,9 +82,10 @@
  * - Caption is a display name for the identity, presented to the user. Default
  * value is an empty caption. 
  *
- * - Realms is a list of realms that the identity can be used in. Interpretation
- * of this field is up to the application; it is not used by gSSO. Default value
- * is an empty list.
+ * - Realms is a list of realms that the identity can be used in.
+ *   Interpretation of this field is up to the method. Typically it is
+ *   list of internet domains allowed for authentication request.
+ *   Default value is an empty list.
  * 
  * - Type is a #SignonIdentityType. Interpretation of this field is up to the application;
  * gSSO does not use it. Default value is #SIGNON_IDENTITY_TYPE_OTHER

diff --git a/libgsignon-glib/signon-security-context.c b/libgsignon-glib/signon-security-context.c
index da2304d4c1a5b60d3b79310d9d46d0b1ce38268c..c45bd5281f01ac5ed154295d2d37cdbbecfddba8 100644 (file)
--- a/libgsignon-glib/signon-security-context.c
+++ b/libgsignon-glib/signon-security-context.c
@@ -48,11 +48,13 @@
  * control decision requires not only a binary identifier, but also information
  * about what the binary is doing). 
  * 
- * System context
- * and application context can contain a wildcard match "*" which disables the ACL
- * check when a default gSSO extension is used. Check the documentation for a 
- * platform specific extension to determine if "*" has any effect with that
- * custom extension.
+ * System context and application context can contain a wildcard
+ * operator "*" to match 'any', while "" matches 'none' when a default
+ * gSSO extension is used. Matches are always evaluated in order where
+ * system context is evaluated first and if match is found, only then
+ * application context is evaluated.
+ * Check the documentation for a platform specific extension to determine
+ * any specific match rules with custom ACM (Access Control Manager).
  */
 
 #include "signon-security-context.h"