[ 
https://issues.apache.org/jira/browse/SENTRY-1032?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15124130#comment-15124130
 ] 

Gregory Chanan commented on SENTRY-1032:
----------------------------------------

>From https://en.wikipedia.org/wiki/Role-based_access_control there's this 
>quote:
{quote}
Role assignment: A subject can exercise a permission only if the subject has 
selected or been assigned a role.
{quote}

The term "select" is probably not good here given its meaning in the DB model.  
Perhaps we should use the term assign?  Assign group to role?

> Rename shell command group/role shell commands and implement with solr shell
> ----------------------------------------------------------------------------
>
>                 Key: SENTRY-1032
>                 URL: https://issues.apache.org/jira/browse/SENTRY-1032
>             Project: Sentry
>          Issue Type: Task
>          Components: Service
>    Affects Versions: 1.7.0
>            Reporter: Gregory Chanan
>            Assignee: Gregory Chanan
>         Attachments: SENTRY-1032.patch
>
>
> --add_role_group is a bit confusing because the command is to add group to 
> role (i.e. the objects are reversed).  Let's change this before it is 
> released and we need to support backwards compatibility.
> same for --delete_role_group.
> Also, these commands are not implemented with SentryShellSolr.  Let's do that.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to