[ 
https://issues.apache.org/jira/browse/GEODE-2817?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16161870#comment-16161870
 ] 

ASF subversion and git services commented on GEODE-2817:
--------------------------------------------------------

Commit e00673b254a118851fa5c6aa17a741ace52223b2 in geode's branch 
refs/heads/develop from [~jinmeiliao]
[ https://gitbox.apache.org/repos/asf?p=geode.git;h=e00673b ]

GEODE-2817: consolidate authorize(*) methods


> Have the function author determine what permissions the function execution 
> requires
> -----------------------------------------------------------------------------------
>
>                 Key: GEODE-2817
>                 URL: https://issues.apache.org/jira/browse/GEODE-2817
>             Project: Geode
>          Issue Type: New Feature
>          Components: docs, security
>            Reporter: Jinmei Liao
>
> Currently to execute a function, you will need "data:write" permission, but 
> it really depends on what the function is doing. So we should either:
> 1) externalize the authorize* api so that function author can use it in the 
> function.execute code to check authorization.
> 2) add a function api to tell the framework what permission this function 
> needs to execute, so that the framework will check the permission before 
> executing the function.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to