Skip to content

Introduce the "grant" and "metagrant" privileges #5498

@TarantoolBot

Description

@TarantoolBot

Since: 3.6.0

The new privileges are only grantable on the "universe".

Root document: https://www.tarantool.io/en/doc/latest/admin/access_control/#privileges

  • The grant permission granted to the "universe" allows a user to
    grant all permissions, except "grant" and "metagrant", to an object,
    object class or the "universe" to available users (granting oneself
    is not allowed by the permission though).
  • The metagrant permission granted to the "universe" allows a user
    to grant "grant" and "metagrant" permissions to available users (no
    granting oneself allowed by this permission either).
    Requested by @mkostoevr in tarantool/tarantool@1fd4404.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions