Details
-
Task
-
Resolution: Fixed
-
Major
-
None
-
None
Description
For GA functions we need to be able to add global and scope function related roles.
More specifically we need to be able to grant and revoke
MANAGE_FUNCTIONS (create and drop global functions)
EXECUTE_FUNCTIONS (execute any global function)
EXECUTE_FUNCTION[function] (execute a specific global function)
And those scope specific
MANAGE_FUNCTIONS[scope] (create and drop functions in scope)
EXECUTE_FUNCTIONS[scope] (execute any function in scope)
EXECUTE_FUNCTION[scope:function] (execute a specific function in the given scope)
Could we start with the first set?
Attachments
For Gerrit Dashboard: MB-33173 | ||||||
---|---|---|---|---|---|---|
# | Subject | Branch | Project | Status | CR | V |
128129,5 | MB-33173 support wildcard 'any' in permission filters | master | ns_server | Status: MERGED | +2 | +1 |
128130,4 | MB-33173 support compiling roles parameterized with buckets and | master | ns_server | Status: MERGED | +2 | +1 |
128132,5 | MB-33173 adjust GET /settings/rbac/roles API so it does not break | master | ns_server | Status: MERGED | +2 | +1 |
128133,6 | MB-33173 N1QL functions roles | master | ns_server | Status: MERGED | +2 | +1 |
128134,6 | MB-33173 tests for N1QL functions roles | master | ns_server | Status: MERGED | +2 | +1 |