acelyc111 commented on issue #1054:
URL:
https://github.com/apache/incubator-pegasus/issues/1054#issuecomment-1214867380
1. More restrict for common query type requests.
a. As table above, users should be granted 'metadata' before query cluster
info.
2. MetaServer have to support table level ACL
a. For example, query route info of a table (i.e.
RPC_CM_QUERY_PARTITION_CONFIG_BY_INDEX) must be in ACL
3. To support 'database' level ACL:
a. on MetaServer:
i. Handle requests on MetaServer, they are listed in the table above,
'Database level.list/create/drop/metadata/control'.
ii. Add unordered_map<'table_prefix', unordered_set<user_name>> structure.
iii. Parse table name from request messages when handle requests.
a. on ReplicaServer:
i. Add unordered_map<'table_prefix', unordered_set<user_name>> structure
too.
ii. Because "table prefix" string doesn't belong to any tables/replica,
so besides replica envs, we have to add an extra server level envs for ACL.
iii. We have to maintainance the relationship between table id and table
name carefully.
iv. Parse table id and transfer it to table name from request messages
when handle requests.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
