Introduce the "grant" and "metagrant" privileges
Open
Nobody has claimed this yet.
- Dominant language
- CSS
- Stars
- 15
- Forks
- 49
- Avg merge
- 1d 13h
- Merged PRs (30d)
- 3
Description
Since: 3.6.0
The new privileges are only grantable on the "universe".
Root document: https://www.tarantool.io/en/doc/latest/admin/access_control/#privileges
- The
grantpermission granted to the "universe" allows a user to
grant all permissions, except "grant" and "metagrant", to an object,
object class or the "universe" to available users (granting oneself
is not allowed by the permission though). - The
metagrantpermission granted to the "universe" allows a user
to grant "grant" and "metagrant" permissions to available users (no
granting oneself allowed by this permission either).
Requested by @mkostoevr in https://github.com/tarantool/tarantool/commit/1fd4404bf66eff7f7d072e9883a537922d06f125.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Open the linked access-control documentation page first and locate its privileges section. Add the documented behavior for the universe-only grant and metagrant privileges, including their scope and restriction on granting them to oneself. Done means the page clearly covers both privileges and matches the issue’s stated semantics.
Written by the indexing model from the issue text.
Assessment
- Domain
- documentation
- Issue type
- Documentation
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 55/100