jerryshao commented on PR #3506: URL: https://github.com/apache/gravitino/pull/3506#issuecomment-2230460509
Hi @lw-yang sorry for late response, as we are heavily refactoring this RBAC part. After discussing internally, I think we will still physically put user/group/role under metalake, not under a dedicated catalog. But from the semantic level, we will have a virtual namespace for user/group/role like "metalek.system.role.xxx". The reason why I don't want to change it is that I want the metadata also queryable like data ( similar to Iceberg's metadata table or mysql's system table), but currently we cannot achieve this, "user/group/role" is more a table level metadata, not a record in the metadata table. I cannot figure out a better solution, so instead of further changing this, I'm inclined to hold on the changes and continue on it after we clearly figure out the solution. Sorry about this. I think we can still leave this PR open, and when we need this we still continue on it. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
