[jira] [Comment Edited] (CALCITE-5681) Support authorization via GRANT and REVOKE DDL commands

["hongyu guo (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CALCITE-5681?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17738352#comment-17738352 ] 

hongyu guo edited comment on CALCITE-5681 at 6/29/23 3:30 AM:
--------------------------------------------------------------

[postgres grant sql|https://www.postgresql.org/docs/current/sql-grant.html]

I actually followed the syntax used in Postgres ({{{}ALL TABLES IN SCHEMA{}}}). And using wildcards like 
{code:java}
grant select on s.* to user{code}
is not supported in Postgres. 


was (Author: JIRAUSER300840):
[postgres grant sql|https://www.postgresql.org/docs/current/sql-grant.html]

I actually followed the syntax used in Postgres ({{{}ALL TABLES IN SCHEMA{}}}). And using wildcards like {{}}
{code:java}
grant select on s.* to user{code}
{{}}

is not supported in Postgres. 

> Support authorization via GRANT and REVOKE DDL commands
> -------------------------------------------------------
>
>                 Key: CALCITE-5681
>                 URL: https://issues.apache.org/jira/browse/CALCITE-5681
>             Project: Calcite
>          Issue Type: Bug
>            Reporter: Julian Hyde
>            Assignee: hongyu guo
>            Priority: Major
>              Labels: pull-request-available
>
> Support authorization via GRANT and REVOKE DDL commands.
> While CALCITE-2194 describes how authorization could be built into the schema (e.g. user1 can see tables table1 and table2), it requires people to create their own Schema objects. This feature would add GRANT and REVOKE commands to the DDL parser in the "server" component.
> The syntax is TBD but would look something like this:
> {code:java}
> GRANT SELECT ON TABLE table1, table2 TO user1;
> REVOKE ALL ON table1 FROM user1; {code}
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)