Open
Description
Product: Tarantool
Since: 3.0
Root document: new page in https://www.tarantool.io/en/doc/latest/reference/reference_lua/compat/;
check if changes are needed in https://www.tarantool.io/en/doc/latest/book/admin/access_control/
SME: @ locker
Details
Historically, it was possible to grant the execute
privilege on
a space although this action had no effect. Since Tarantool 3.0
it isn't allowed anymore. The new compat
module option
box_space_execute_priv
was added to revert to the old behavior.
Please create a documentation page for the new compatibility option at
https://tarantool.io/compat/box_space_execute_priv
Example:
tarantool> box.cfg{log_level = 'error'}
---
...
tarantool> box.schema.user.create('alice')
---
...
tarantool> box.schema.user.grant('alice', 'execute', 'space')
---
- error: Unsupported space privilege 'execute'
...
tarantool> require('compat').box_space_execute_priv = 'old'
---
...
tarantool> box.schema.user.grant('alice', 'execute', 'space')
---
...
Requested by @locker in tarantool/tarantool@21063b4.
Definition of done
- a page about
compat.box_space_execute_priv
is added to thecompat
module reference - the
compat.box_space_execute_priv
description in the configuration reference has a "see also" link to the option reference page -
execute
privilege is never applied to spaces in docs