urQL/docs/permissions.md
2022-08-10 13:23:12 -07:00

32 lines
860 B
Markdown

```
GRANT { ADMINREAD TO { PARENT | SIBLINGS | MOONS | <@p> [ ,...n ] }
| READONLY TO { PARENT | SIBLINGS | MOONS | <@p> [ ,...n ] }
<grant-target>
| READWRITE TO { PARENT | SIBLINGS | MOONS }
<grant-target>
}
```
```
<grant-target> ::=
ON { <database-name>
| [<database-name>]<namespace-name>
| { [<db-qualifer>]<view-name> | [<db-qualifer>]<table-name> }
```
Example:
`GRANT READONLY TO ~sampel-palnet ON my-namespace`
Discussion:
Grantees `PARENT` and `SIBLINGS` are only valid for moon servers. `MOONS` is only valid for moon parents.
`ADMINREAD` grants read-only access to the servers administration tables and views
### _______________________________
```
REVOKE { ADMINREAD | READONLY | READWRITE | ALL }
FROM { PARENT | SIBLINGS | MOONS | ALL | <@p> [ ,...n ] }
<grant-target>
```