Skip to content

Document box_space_execute_priv compatibility option #3801

Open
@TarantoolBot

Description

@TarantoolBot

Product: Tarantool
Since: 3.0
Root document: new page in https://www.tarantool.io/en/doc/latest/reference/reference_lua/compat/;
check if changes are needed in https://www.tarantool.io/en/doc/latest/book/admin/access_control/
SME: @ locker

Details

Historically, it was possible to grant the execute privilege on
a space although this action had no effect. Since Tarantool 3.0
it isn't allowed anymore. The new compat module option
box_space_execute_priv was added to revert to the old behavior.

Please create a documentation page for the new compatibility option at
https://tarantool.io/compat/box_space_execute_priv

Example:

tarantool> box.cfg{log_level = 'error'}
---
...

tarantool> box.schema.user.create('alice')
---
...

tarantool> box.schema.user.grant('alice', 'execute', 'space')
---
- error: Unsupported space privilege 'execute'
...

tarantool> require('compat').box_space_execute_priv = 'old'
---
...

tarantool> box.schema.user.grant('alice', 'execute', 'space')
---
...

Requested by @locker in tarantool/tarantool@21063b4.

Definition of done

  • a page about compat.box_space_execute_priv is added to the compat module reference
  • the compat.box_space_execute_priv description in the configuration reference has a "see also" link to the option reference page
  • execute privilege is never applied to spaces in docs

Metadata

Metadata

Assignees

No one assigned

    Labels

    3.0accessRelated with the granting of rights, the accesscompat

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions