[apache#3342] Refactor the role and privilege model

qqqttt123 · May 15, 2024 · f1a5741 · f1a5741
1 parent ff6f620
commit f1a5741
Show file tree

Hide file tree

Showing 34 changed files with 1,354 additions and 574 deletions.
diff --git a/api/src/main/java/com/datastrato/gravitino/authorization/Privilege.java b/api/src/main/java/com/datastrato/gravitino/authorization/Privilege.java
@@ -19,6 +19,12 @@ public interface Privilege {
   /** @return A readable string representation for the privilege. */
   String simpleString();
 
+  /**
+   * @return The effect of the privilege. `ALLOW` means that you can use the privilege, `DENY` means
+   *     that you can't use the privilege
+   */
+  Effect effect();
+
   /** The name of this privilege. */
   enum Name {
     /** The privilege to create a catalog. */
@@ -116,4 +122,9 @@ public long getHighBits() {
       return highBits;
     }
   }
+
+  enum Effect {
+    ALLOW,
+    DENY
+  }
 }