RaigorJiang opened a new issue, #25149:
URL: https://github.com/apache/shardingsphere/issues/25149

   Hi community,
   
   Now, in ShardingSphere-Proxy, we provide two privilege providers: 
`ALL_PERMITTED` and `DATABASE_PERMITTED`.
   Some users are confused when using it, especially in cluster mode, modifying 
the local yaml file does not really change the authority configuration in 
cluster, which increases the difficulty of operation and maintenance.
   
   Maybe we can combine these two providers:
   1. Merge providers into one
   2. Super user can be specified (the effect is the same as `ALL_PERMITTED`)
   3. Non-super users must be authorized, otherwise they cannot operate any 
database.
   4. The super user can execute `ALTER AUTHORITY RULE` through DistSQL to 
dynamically modify the configuration.
   
   This is just a preliminary idea, more suggestions and discussions are 
welcome.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: 
[email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to