Skip to content

Add a "Revoking grants" paragraph to documentation #5152

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
AArdeev opened this issue Jun 4, 2025 · 0 comments · Fixed by #5161
Closed

Add a "Revoking grants" paragraph to documentation #5152

AArdeev opened this issue Jun 4, 2025 · 0 comments · Fixed by #5161
Assignees
Labels

Comments

@AArdeev
Copy link
Contributor

AArdeev commented Jun 4, 2025

Product: Tarantool
Audience/target: Users
Root document:

Details

  • Few places in documents explain how to grant privileges to users, but they do not explain revoking these privileges. This looks like a consistency gap.
  • For example, to take a previously granted privilege to a lua function away, specify the lua_call option without the previously allowed function name, or with an empty privileges array (further options may retain commented-out):
# grant privilege
credentials:
  users:
    alice:
      privileges:
        - permissions: [execute]
          lua_call: [my_func, my_func2]

# take away a privilege:
credentials:
  users:
    alice:
      privileges:
        - permissions: [execute]
          lua_call: [my_func]

# take away all previously granted privileges:
credentials:
  users:
    alice:
      privileges: []
#        - permissions: [execute]
#          lua_call: [my_func, my_func2]
@AArdeev AArdeev self-assigned this Jun 4, 2025
@AArdeev AArdeev added documentation Improvements or additions to documentation doc_gap labels Jun 4, 2025
AArdeev added a commit that referenced this issue Jun 6, 2025
@AArdeev AArdeev removed the documentation Improvements or additions to documentation label Jun 6, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant