Work in progress ...
#CREATEROLE
Creates a new role with a given name. Permission can be assigned to this role.
| Code Block |
|---|
#CREATEROLE simpleuser |
#DROPROLE
Drops a role from the system.
| Code Block |
|---|
#DROPROLE simpleuser |
#GRANTPERMISSION
Grants a set of permissions to a single object, for a user or a role.
| Code Block |
|---|
#GRANTPERMISSION username/rolename operation1 operation2 operation3 ... object #GRANTPERMISSION otherUser read stop_query nexmark:person #GRANTPERMISSION public read nexmark:person #GRANTPERSMISSION otherUser remove_all null // Remark: There a some commands that don't have a target. In this case, the last parameter can be any value and will be ignored, but must be given! |
#REVOKEPERMISSIONS
Removes a set of given permissions.
| Code Block |
|---|
#REVOKEPERMISSION username/rolename operation1 operation2 operation3 object #REVOKEPERMISSION otherUser stop_query nexmark:person #REVOKEPERMISSION otherUser remove_all null // Remark: There a some commands that don't have a target. In this case, the last parameter can be any value and will be ignored, but must be given |
#GRANTROLES
Grant a set of roles to a given user.
| Code Block |
|---|
#GRANTROLE username role #GRANTROLE otherUser DSUser |
#REVOKEROLES
remove a set of roles from a given user.
| Code Block |
|---|
#GRANTROLE username role
#GRANTROLE otherUser DSUser |
TODO: Move Explain and move to another place
List of (typical) permissions (permissions can be extended by plugins):
| Name | Description |
|---|---|
ADD_ENTITY, GET_ENTITY, REMOVE_ENTITY, ADD_DATATYPE, ADD_SOURCETYPE, ADD_STREAM, REMOVE_STREAM, REMOVE_VIEW, ADD_VIEW, READ, ADD_STORED_PROCEDURE, REMOVE_STORED_PROCEDURE, EXECUTE, ADD_STORE, REMOVE_STORE, GET_ALL, REMOVE_ALL | |
CREATE_TENANT, CREATE_USER, A LTER_USER, DELETE_USER, DEACTIVATE_USER, SET_SYSTEM_USER, CREATE_ROLE, DELETE_ROLE, GRANT, GRANT_ALL, REVOKE, REVOKE_ALL, GRANT_ROLE, REVOKE_ROLE, LOGOUT, GET_ALL_USER, GET_ALL, SUDO_LOGIN; | |
ADD_QUERY, GET_QUERY, START_QUERY, STOP_QUERY, REMOVE_QUERY, SUSPEND_QUERY, RESUME_QUERY, PARTIAL_QUERY, START_ALL_QUERIES, STOP_ALL_QUERIES, REMOVE_ALL_QUERIES, GET_ALL_QUERIES, SET_SCHEDULER, START_SCHEDULER, STOP_SCHEDULER, RUN_COMMAND; | |
SET_PARAM, SAVE_PARAM |