examples:
$ koji list-permissions
Permission name Description
admin Admin permission allow operations with admin only commands.
appliance Appliance permission allow appliance operation.
...
$ koji list-permissions --mine
Permission name
sign
admin

$ koji call getAllPerms
[{'description': 'Admin permission allow operations with admin only commands.',
'id': 1,
'name': 'admin'},
{'description': 'Appliance permission allow appliance operation.',
'id': 2,
'name': 'appliance'},
...
]

$ koji call getPerms
['sign', 'admin']

$ koji call getUserPerms userID=1
['sign', 'admin']

I can't find any use of this permissions anymore. Maybe we can drop it here?

"Image permission allows spawning image tasks"

"Livecd permissions allows spawning livecd tasks"

The default vm policy requires this permission to trigger Windows builds.

grant-permission --new should have an option to add also description of that new permission.
Furthermore, new editPermission(perm_id, description) call would be valuable as there is no way how to change the description.

@tkopecek description for next perms added, grant-permission has option to add description (also for API) and created edit-permission and editPermission.

I edited the descriptions to be simpler, please take a look:

'admin', 'Full administrator access. Perform all actions.'
'appliance', 'Create appliance builds - deprecated.'
'dist-repo', 'Create a dist-repo.'
'host', 'Add, remove, enable, disable hosts and channels.'
'image', 'Start image tasks.'
'image-import', 'Import image archives.'
'livecd', 'Start livecd tasks.'
'maven-import', 'Import maven archives.'
'repo', 'Manage repos: newRepo, repoExpire, repoDelete, repoProblem.'
'sign', 'Import RPM signatures and write signed RPMs.'
'tag', 'Manage packages in tags: add, block, remove, and clone tags.'
'target', 'Add, edit, and remove targets.'
'win-admin', 'The default hub policy rule for "vm" requires this permission to trigger Windows builds.'
'win-import', 'Import win archives.'

@ktdreyer thank you, updated.

Commit cac6d20 fixes this pull-request