[apache#3342] Refactor the role and privilege model

qqqttt123 · May 15, 2024 · e6f2848 · e6f2848
1 parent ff6f620
commit e6f2848
Show file tree

Hide file tree

Showing 35 changed files with 1,454 additions and 556 deletions.
diff --git a/api/src/main/java/com/datastrato/gravitino/authorization/Privilege.java b/api/src/main/java/com/datastrato/gravitino/authorization/Privilege.java
@@ -19,6 +19,12 @@ public interface Privilege {
   /** @return A readable string representation for the privilege. */
   String simpleString();
 
+  /**
+   * @return The effect of the privilege. `ALLOW` means that you are allowed to use the privilege,
+   *     `DENY` means that you are denied to use the privilege
+   */
+  Effect effect();
+
   /** The name of this privilege. */
   enum Name {
     /** The privilege to create a catalog. */
@@ -116,4 +122,13 @@ public long getHighBits() {
       return highBits;
     }
   }
+
+  /**
+   * The effect of this privilege. `ALLOW` means that you are allowed to use the privilege, `DENY`
+   * means that you are denied to use the privilege.
+   */
+  enum Effect {
+    ALLOW,
+    DENY
+  }
 }