New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove all privileges of a user or role [CORE2113] #2546
Comments
Modified by: @AlexPeshkoffassignee: Alexander Peshkov [ alexpeshkoff ] |
Commented by: @dyemanov Is this statement expected to revoke both granted permissions and roles from the user / role? |
Commented by: @AlexPeshkoff I suppose it should bring a database to the state when removed user(role) is never mentioned in any ACL. |
Commented by: Bjoern Reimer (bnreimer) What about making a difference? Only removing al User-permissions with above mentioned commands and add: REVOKE ALL ROLES FROM ... So a Admin can send two commands, when he wants to remove all permissions but has the choice to remove only direct granted permissions or roles. |
Commented by: @AlexPeshkoff I don't see big use in ability to separately remove roles and all the rest, and it seems to be unneeded over-complication. Remember - we started with a problem: user 'X' is dropped, why keep privileges for him? |
Commented by: @dyemanov I tend to agree with Alex here. |
Modified by: @AlexPeshkoffstatus: Open [ 1 ] => Resolved [ 5 ] resolution: Fixed [ 1 ] Fix Version: 2.5 Beta 1 [ 10251 ] |
Commented by: @AlexPeshkoff The final syntax for a command I've chosen is: And - I'm opened to modifying it. May be |
Commented by: @asfernandes Alex, I can't understand what is the problem with REVOKE ALL FROM { <userlist> | <rolelist> }. The meaning of ALL ON ALL is also something I don't understand. |
Commented by: @AlexPeshkoff Adriano, I had a reason to do it. It's too easy to forget ON clause, and instead desired |
Modified by: @pavel-zotovQA Status: No test |
Modified by: @pavel-zotovstatus: Resolved [ 5 ] => Closed [ 6 ] |
Modified by: @pavel-zotovstatus: Closed [ 6 ] => Closed [ 6 ] QA Status: No test => Covered by another test(s) |
Submitted by: Bjoern Reimer (bnreimer)
Is related to QA318
Votes: 1
Proposal to extend REVOKE Syntax:
REVOKE ALL FROM <user> [WITH ADMIN OPTION];
REVOKE ALL FROM ROLE <role> [WITH ADMIN OPTION];
Commits: 203cf9a d3f22d3
The text was updated successfully, but these errors were encountered: