yuqi1129 commented on code in PR #4496: URL: https://github.com/apache/gravitino/pull/4496#discussion_r1718029195
########## docs/security/access-control.md: ########## @@ -0,0 +1,646 @@ +--- +title: "Access Control" +slug: /security/access-control +keyword: security +license: "This software is licensed under the Apache License version 2." +--- + +## Overview + +Gravitino adopts RBAC and DAC. + +Role-based Access Control (RBAC): Access privileges are assigned to roles, which are in turn assigned to users or groups. + +Discretionary Access Control(DAC): Each metadata object has an owner, who can in turn grant access to that object. + +:::info + +Gravitino only supports authorization for secureable objects, when it comes to authentication. Review Comment: What I want to express: the second sentence `Gravitino doesn't support metadata authentication.` is about authentication because the first sentence is just about `authorization`. The sentences in this passage are unnaturally connected. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
