Skip to content

Commit dae8d52

Browse files
Merge pull request #142 from oracle/securityReadmeImp
chore(docs): make it clear that some privileges are dependent of the schema name
2 parents bf73d8e + 0aa5353 commit dae8d52

File tree

1 file changed

+6
-3
lines changed
  • templates/ords-remix-jwt-sample/ords/security

1 file changed

+6
-3
lines changed

templates/ords-remix-jwt-sample/ords/security/README.MD

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -147,15 +147,18 @@ This is the audience that both the ORDS Sample App and the ORDS JWT Client will
147147

148148
Now that we have created our API, go to the `Permissions` tab and grant it the following permissions/privileges.
149149

150+
> [!IMPORTANT]
151+
> Replace <SCHEMA_NAME> with the `SCHEMA_NAME` variable specified on your `.env` file.
152+
150153
| Permission | Description | What it does in the ORDS Sample App |
151154
| ---------- | ----------- | ----------- |
152155
|read:general_user_content | Read all of the general user endpoints | Allows the Sample App to read user information like first name, last name, email and Auth0 ID |
153156
| concert_app_authuser | Provides access to the user specific endpoints | Allows authenticated users to interact with user specific ORDS Endpoints, like subscribing to a concert and more. |
154157
| concert_app_euser | Provides limited access to the concert app endpoints | Allows unauthenticated users to interact with limited ORDS Endpoints. |
155158
| concert_app_admin | Provides access to the concert app admin endpoints | Allows authenticated admin users to interact with user specific ORDS Endpoints, like the create or delete Artist Endpoints. |
156-
| oracle.dbtools.autorest.privilege.CONCERT_SAMPLE_APP.SEARCH_VIEW | Provides access to the AutoREST search view. | Allows every user of the ORDS Concert App to access the search/discover functionality. |
157-
oracle.dbtools.autorest.privilege.CONCERT_SAMPLE_APP.SEARCH_ARTIST_VIEW | Provides access to the AutoREST artists search view. | Allows every user of the ORDS Concert App to access the search/discover functionality. |
158-
| oracle.dbtools.autorest.privilege.CONCERT_SAMPLE_APP.SEARCH_VENUES_VIEW | Provides access to the AutoREST venues search view. | Allows every user of the ORDS Concert App to access the search/discover functionality. |
159+
| oracle.dbtools.autorest.privilege.`<SCHEMA_NAME>`.SEARCH_VIEW | Provides access to the AutoREST search view. | Allows every user of the ORDS Concert App to access the search/discover functionality. |
160+
oracle.dbtools.autorest.privilege.`<SCHEMA_NAME>`.SEARCH_ARTIST_VIEW | Provides access to the AutoREST artists search view. | Allows every user of the ORDS Concert App to access the search/discover functionality. |
161+
| oracle.dbtools.autorest.privilege.`<SCHEMA_NAME>`.SEARCH_VENUES_VIEW | Provides access to the AutoREST venues search view. | Allows every user of the ORDS Concert App to access the search/discover functionality. |
159162

160163
Once you have added all of the permissions described above your list of permissions should look like this.
161164

0 commit comments

Comments
 (0)