Skip to content

Add a "Revoking grants" paragraph to documentation #5152

Closed
@AArdeev

Description

@AArdeev

Product: Tarantool
Audience/target: Users
Root document:

Details

  • Few places in documents explain how to grant privileges to users, but they do not explain revoking these privileges. This looks like a consistency gap.
  • For example, to take a previously granted privilege to a lua function away, specify the lua_call option without the previously allowed function name, or with an empty privileges array (further options may retain commented-out):
# grant privilege
credentials:
  users:
    alice:
      privileges:
        - permissions: [execute]
          lua_call: [my_func, my_func2]

# take away a privilege:
credentials:
  users:
    alice:
      privileges:
        - permissions: [execute]
          lua_call: [my_func]

# take away all previously granted privileges:
credentials:
  users:
    alice:
      privileges: []
#        - permissions: [execute]
#          lua_call: [my_func, my_func2]

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions