jarredhj0214 commented on code in PR #12288:
URL: https://github.com/apache/gravitino/pull/12288#discussion_r3800128485
##########
docs/security/access-control.md:
##########
@@ -270,6 +270,66 @@ object: the owner of the table or view, plus
`CREATE_TABLE` or `CREATE_VIEW` on
| Job template | `REGISTER_JOB_TEMPLATE` | `USE_JOB_TEMPLATE`
| Owner | Run a job: `RUN_JOB` and `USE_JOB_TEMPLATE` |
| Job | | Owner
| Owner | |
+Bulk user access-control APIs use the same privileges as the matching
single-user operations. These
+bulk operations are authorized once before processing the request. Bulk user
add requests report
+item-level failures in `errors`.
+
+| API | Required privilege
| Request field |
Review Comment:
Removed the `Request field` column from the bulk user API privilege table.
##########
docs/security/access-control.md:
##########
@@ -270,6 +270,66 @@ object: the owner of the table or view, plus
`CREATE_TABLE` or `CREATE_VIEW` on
| Job template | `REGISTER_JOB_TEMPLATE` | `USE_JOB_TEMPLATE`
| Owner | Run a job: `RUN_JOB` and `USE_JOB_TEMPLATE` |
| Job | | Owner
| Owner | |
+Bulk user access-control APIs use the same privileges as the matching
single-user operations. These
+bulk operations are authorized once before processing the request. Bulk user
add requests report
+item-level failures in `errors`.
+
+| API | Required privilege
| Request field |
+|-----------------------------------------------------|---------------------------------------------|---------------|
+| `POST /api/bulk/metalakes/{metalake}/users/add` | `OWNER` of the
metalake or `MANAGE_USERS` | `users` |
+| `POST /api/bulk/metalakes/{metalake}/users/remove` | `OWNER` of the
metalake or `MANAGE_USERS` | `names` |
+
+For example, add users in bulk:
+
+```shell
+curl -X POST "http://localhost:8090/api/bulk/metalakes/{metalake}/users/add"; \
+ -H "Authorization: Bearer $MANAGER_TOKEN" \
+ -H "Accept: application/vnd.gravitino.v1+json" \
+ -H "Content-Type: application/json" \
+ -d '{
+ "users": [
+ {"name": "analyst"},
+ {"name": "developer", "externalId": "[email protected]", "enabled":
true}
+ ]
+}'
+```
+
+Remove users in bulk:
+
+```shell
+curl -X POST
"http://localhost:8090/api/bulk/metalakes/{metalake}/users/remove"; \
+ -H "Authorization: Bearer $MANAGER_TOKEN" \
+ -H "Accept: application/vnd.gravitino.v1+json" \
+ -H "Content-Type: application/json" \
+ -d '{
+ "names": ["analyst", "developer"]
+}'
+```
+
+The same bulk add request can be sent from Java with `HttpClient`:
Review Comment:
Removed the Java `HttpClient` example from this section.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
