You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@kylin.apache.org by ni...@apache.org on 2019/06/19 11:35:18 UTC
[kylin] 02/03: Add tutorial about table acl
This is an automated email from the ASF dual-hosted git repository.
nic pushed a commit to branch document
in repository https://gitbox.apache.org/repos/asf/kylin.git
commit 27c7ef76923be1d1bbe837f75aea85f433628794
Author: GinaZhai <na...@kyligence.io>
AuthorDate: Mon Jun 17 22:33:56 2019 +0800
Add tutorial about table acl
---
website/_data/docs-cn.yml | 3 +--
website/_data/docs.yml | 3 +--
website/_docs/tutorial/project_level_acl.cn.md | 24 ++++++++++++++++++++--
website/_docs/tutorial/project_level_acl.md | 28 +++++++++++++++++++++++---
website/_docs/tutorial/table_level_acl.cn.md | 27 -------------------------
website/_docs/tutorial/table_level_acl.md | 28 --------------------------
6 files changed, 49 insertions(+), 64 deletions(-)
diff --git a/website/_data/docs-cn.yml b/website/_data/docs-cn.yml
index f2025fe..955021e 100644
--- a/website/_data/docs-cn.yml
+++ b/website/_data/docs-cn.yml
@@ -32,8 +32,7 @@
- tutorial/create_cube
- tutorial/cube_build_job
- tutorial/sql_reference
- - tutorial/project_level_acl
- - tutorial/table_level_acl
+ - tutorial/project_table_level_acl
- tutorial/cube_spark
- tutorial/cube_streaming
- tutorial/cube_build_performance
diff --git a/website/_data/docs.yml b/website/_data/docs.yml
index 3de5556..27a4222 100644
--- a/website/_data/docs.yml
+++ b/website/_data/docs.yml
@@ -40,8 +40,7 @@
- tutorial/create_cube
- tutorial/cube_build_job
- tutorial/sql_reference
- - tutorial/project_level_acl
- - tutorial/table_level_acl
+ - tutorial/project_table_level_acl
- tutorial/cube_spark
- tutorial/cube_streaming
- tutorial/cube_build_performance
diff --git a/website/_docs/tutorial/project_level_acl.cn.md b/website/_docs/tutorial/project_level_acl.cn.md
index e33b706..ed52060 100644
--- a/website/_docs/tutorial/project_level_acl.cn.md
+++ b/website/_docs/tutorial/project_level_acl.cn.md
@@ -1,8 +1,8 @@
---
layout: docs-cn
-title: Project Level ACL
+title: 项目和表级别权限控制
categories: tutorial
-permalink: /cn/docs/tutorial/project_level_acl.html
+permalink: /cn/docs/tutorial/project_table_level_acl.html
since: v2.1.0
---
@@ -61,3 +61,23 @@ Additionally, when Query Pushdown is enabled, QUERY access permission on a proje
Please note that in order to grant permission to default user (MODELER and ANLAYST), these users need to login as least once.
+
+## 表级别权限控制
+用户是否可以访问表取决于表级别的权限控制，该功能默认开启。可通过将 `kylin.query.security.table-acl-enabled` 的值设为 false 的方式关闭该功能。
+不同项目之间权限是互不影响的。
+一旦将表权限赋予用户，则该用户可在页面上看到该表。
+
+
+### 管理表级别权限
+
+1. 点击 Model 页面的 Data Source
+2. 展开某个数据库，选择一张表并点击 Access
+3. 点击 `Grant` 授权给用户
+
+ 
+
+4. 选择 type（有 user 和 role 两种），在下拉框中选择 User / Role name 并点击 `Submit` 进行授权
+
+5. 您也可以在该页面删除该权限。
+
+ 
\ No newline at end of file
diff --git a/website/_docs/tutorial/project_level_acl.md b/website/_docs/tutorial/project_level_acl.md
index f2d6528..8453390 100644
--- a/website/_docs/tutorial/project_level_acl.md
+++ b/website/_docs/tutorial/project_level_acl.md
@@ -1,11 +1,13 @@
---
layout: docs
-title: Project Level ACL
+title: Project And Table Level ACL
categories: tutorial
-permalink: /docs/tutorial/project_level_acl.html
+permalink: /docs/tutorial/project_table_level_acl.html
since: v2.1.0
---
+
+### Project Level ACL
Whether a user can access a project and use some functionalities within the project is determined by project-level access control, there are four types of access permission role set at the project-level in Apache Kylin. They are *ADMIN*, *MANAGEMENT*, *OPERATION* and *QUERY*. Each role defines a list of functionality user may perform in Apache Kylin.
- *QUERY*: designed to be used by analysts who only need access permission to query tables/cubes in the project.
@@ -59,5 +61,25 @@ Additionally, when Query Pushdown is enabled, QUERY access permission on a proje
- Please note that in order to grant permission to default user (MODELER and ANLAYST), these users need to login as least once.
+ Please note that in order to grant permission to default user (MODELER and ANALYST), these users need to login as least once.
+
+## Table Level ACL
+Whether a user can access a table is determined by table-level access control, this function is on by default. Set `kylin.query.security.table-acl-enabled` to false to disable the table-level access control.
+Access permissions are independent between different projects.
+Once table-level access permission has been set for a user, you can see it on the page.
+
+
+### Manage Access Permission at Table-level
+
+1. Click the Data Source tab of Model page.
+2. Expand a database, choose the table and click Access tab.
+3. Click `Grant`to grant permission to user.
+
+ 
+
+4. Choose the type (user or role), choose User / Role name and then click `Submit` to grant permission.
+
+5. You can also delete permission on this page.
+
+ 
\ No newline at end of file
diff --git a/website/_docs/tutorial/table_level_acl.cn.md b/website/_docs/tutorial/table_level_acl.cn.md
deleted file mode 100644
index 4db0871..0000000
--- a/website/_docs/tutorial/table_level_acl.cn.md
+++ /dev/null
@@ -1,27 +0,0 @@
----
-layout: docs-cn
-title: 表级别权限控制
-categories: tutorial
-permalink: /cn/docs/tutorial/table_level_acl.html
-since: v2.0.0
----
-
-用户是否可以访问表取决于表级别的权限控制，该功能默认开启。可通过将 `kylin.query.security.table-acl-enabled` 的值设为 false 的方式关闭该功能。
-不同项目之间权限是互不影响的。
-一旦将表权限赋予用户，则该用户可在页面上看到该表。
-
-
-### 管理表级别权限
-
-1. 点击 Model 页面的 Data Source
-2. 展开某个数据库，选择一张表并点击 Access
-3. 点击 `Grant` 授权给用户
-
- 
-
-4. 选择 type（有 user 和 role 两种），在下拉框中选择 User / Role name 并点击 `Submit` 进行授权
-
-5. 您也可以在该页面删除该权限。
-
- 
-
diff --git a/website/_docs/tutorial/table_level_acl.md b/website/_docs/tutorial/table_level_acl.md
deleted file mode 100644
index 9496cc7..0000000
--- a/website/_docs/tutorial/table_level_acl.md
+++ /dev/null
@@ -1,28 +0,0 @@
----
-layout: docs
-title: Table Level ACL
-categories: tutorial
-permalink: /docs/tutorial/table_level_acl.html
-since: v2.0.0
----
-
-Whether a user can access a table is determined by table-level access control, this function is on by default. Set `kylin.query.security.table-acl-enabled` to false to disable the table-level access control.
-Access permissions are independent between different projects.
-Once table-level access permission has been set for a user, you can see it on the page.
-
-
-### Manage Access Permission at Table-level
-
-1. Click the Data Source tab of Model page.
-2. Expand a database, choose the table and click Access tab.
-3. Click `Grant`to grant permission to user.
-
- 
-
-4. Choose the type (user or role), choose User / Role name and then click `Submit` to grant permission.
-
-5. You can also delete permission on this page.
-
- 
-
-