Access control documentation: Capability replication and view caches

This change describes the properties of the two capabilities 'Start
Replication' and 'View Caches'.

Change-Id: I3cfd20c27e311051f6db22983b1b20f8aa426d82
Signed-off-by: Fredrik Luthander <fredrik.luthander@sonymobile.com>

Documentation/access-control.txt

@@ -858,10 +858,6 @@ much of the server administration burden out to more users.
 Below you find a list of capabilities available:
 
 
-* Start Replication
-
-* View Caches
-
 * View Connections
 
 * View Queue
@@ -973,6 +969,22 @@ This limit applies not only to the link:cmd-query.html[`gerrit query`]
 command, but also to the web UI results pagination size.
 
 
+[[capability_startReplication]]
+Start Replication
+~~~~~~~~~~~~~~~~~
+
+Allow access to execute link:cmd-replicate.html[the `gerrit replicate` command].
+
+
+[[capability_viewCaches]]
+View Caches
+~~~~~~~~~~~
+
+Allow querying for status of Gerrits internal caches.  This capability allows
+the granted group to
+link:cmd-show-caches.html[look at some or all Gerrit caches via ssh].
+
+
 [[restart_changes]]
 [NOTE]
 Restart the Gerrit web application and reload all browsers after

Documentation/cmd-replicate.txt

@@ -53,7 +53,8 @@ just the affected project can update the mirrors.
 ACCESS
 ------
 Caller must be a member of the privileged 'Administrators' group,
-or have been granted the 'Start Replication' global capability.
+or have been granted
+link:access-control.html#capability_startReplication[the 'Start Replication' global capability].
 
 SCRIPTING
 ---------

Documentation/cmd-show-caches.txt

@@ -28,7 +28,8 @@ OPTIONS
 ACCESS
 ------
 Caller must be a member of the privileged 'Administrators' group,
-or have been granted the 'View Caches' global capability.
+or have been granted
+link:access_control.html#capability_viewCaches[the 'View Caches' global capability].
 
 SCRIPTING
 ---------