X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/5e5fc4b5d73b70f416c6d08099a096619bb39f45..ed4d8462e763eb1d8c8f1548912495563cd9288f:/lib/config/config.default.yml?ds=sidebyside

diff --git a/lib/config/config.default.yml b/lib/config/config.default.yml
index 8ad2cb53fc..655e973c2f 100644
--- a/lib/config/config.default.yml
+++ b/lib/config/config.default.yml
@@ -771,8 +771,15 @@ Clusters:
       # Default value zero means tokens don't have expiration.
       TokenLifetime: 0s
 
+      # If true (default) tokens issued through login are allowed to create
+      # new tokens.
+      # If false, tokens issued through login are not allowed to
+      # viewing/creating other tokens.  New tokens can only be created
+      # by going through login again.
+      IssueTrustedTokens: true
+
       # When the token is returned to a client, the token itself may
-      # be restricted from manipulating other tokens based on whether
+      # be restricted from viewing/creating other tokens based on whether
       # the client is "trusted" or not.  The local Workbench1 and
       # Workbench2 are trusted by default, but if this is a
       # LoginCluster, you probably want to include the other Workbench