Role Management

[BohuTANG]

Summary

Databend uses roles to control access to objects as:

• Roles are granted access privileges for objects in the system (databases, tables, etc.).
• Roles are granted to users to enable them to create, modify, and use the objects for which the roles have privileges.
• Roles can be granted to other roles to support defining hierarchical access privileges. (we can support it later)

Tasks:

• CREATE ROLE <name> -- Creates a role under the tenant- create role myrole #2816
  - create role myrole
• GRANT <privileges> on <object> TO ROLE <role-name> #2819
  - grant select,insert on database db1 to role myrole
• GRANT ROLE <name> TO USER <user_name> #2818
• ALTER ROLE [ IF EXISTS ] RENAME TO <new_name>
• DROP ROLE [ IF EXISTS ] <name>
• SHOW ROLES [ LIKE '<pattern>' ] #4392

Reference:
https://docs.snowflake.com/en/sql-reference/ddl-user-security.html#role-management
https://dev.mysql.com/doc/refman/8.0/en/roles.html

[flaneur2020]

could i take this issue? i'd make some investigation on the RBAC system

[BohuTANG]

could i take this issue? i'd make some investigation on the RBAC system

Absolutely!

[flaneur2020]

before working on RBAC, the fine grained privileges on database or tables might be a prelude: #2894

[Xuanwo]

Most work on this issue have been done. Let's close.