[Design] Make GrantRole global privilege

TanmoySG / wunderDB

A micro JSON-based Data Store inspired by MongoDB.

http://wdb.tanmoysg.com/api/

Apache License 2.0

12 stars 0 forks source link

[Design] Make GrantRole global privilege #42

Closed TanmoySG closed 1 year ago

TanmoySG commented 1 year ago

Currently GrantRole is a Database scoped Privilege, i.e it can only be granted on a database or collection. But there are three privileges that are global and we need to be able to grant role without the being scoped to database.

If we send the request without the on field, wdb crashes and panics

TanmoySG commented 1 year ago

Introduced userPrivilege category

Added userPrivilege category
grantRole in userPrivilege category
for userPrivileges, additional cascading checks are conducted if db is present
made the grantRole scope param (on) optional
added user scope