Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document the separate read & write access controls for graphs #219

Closed
n3101 opened this issue Jul 6, 2021 · 10 comments · Fixed by #232
Closed

Document the separate read & write access controls for graphs #219

n3101 opened this issue Jul 6, 2021 · 10 comments · Fixed by #232
Assignees
Milestone

Comments

@n3101
Copy link
Contributor

n3101 commented Jul 6, 2021

gchq/Gaffer#2295 changed the way graph access controls are set. This is not documented. This may also apply to other types of object.

@m29827 m29827 self-assigned this Jul 13, 2021
m29827 added a commit to m29827/gaffer-doc that referenced this issue Jul 13, 2021
m29827 added a commit to m29827/gaffer-doc that referenced this issue Jul 14, 2021
m29827 added a commit to m29827/gaffer-doc that referenced this issue Jul 14, 2021
m29827 added a commit to m29827/gaffer-doc that referenced this issue Jul 14, 2021
m29827 added a commit to m29827/gaffer-doc that referenced this issue Jul 14, 2021
@m29827
Copy link
Member

m29827 commented Jul 14, 2021

Changes on this branch are ready for a PR but are dependent on the updates to AddNamedOperation contained in gchq/Gaffer#2476 being merged and a new Gaffer version containing them being made available.

@n3101
Copy link
Contributor Author

n3101 commented Aug 10, 2021

@m29827 I haven't seen this doc in properly assembled form but skimmed your commits [edit: because I'm that eager to have some doc on this important subject!] . I spotted a couple of typos:

"However public access can be disallow by setting the property"
^^
"The full example we saw in the the User Guide"
^^^

Secondly, I'm not sure I understand this concept:

"Note that "graphAuths" is mutually exclusive with the "readAccessPredicate" and "writeAccessPredicate" settings"

What happens if you put entries in all three? Does graphAuths take precedence; or the predicates take precedence; or what?

m29827 added a commit to m29827/gaffer-doc that referenced this issue Aug 10, 2021
m29827 added a commit to m29827/gaffer-doc that referenced this issue Aug 10, 2021
@m29827
Copy link
Member

m29827 commented Aug 10, 2021

@n3101 I've corrected those typos. Regarding the "mutually exclusive" documentation - the AccessControlledResouce property readAccessPredicate and can't be used in combination with the historic graphAuths, an Exception will be thrown if an attempt is made to configure both. The predicates give additional fine grained controls over and above the old-style checks against a list of auths.

@n3101
Copy link
Contributor Author

n3101 commented Aug 11, 2021

@m29827 Thanks.
"The predicates give additional fine grained controls over and above the old-style checks against a list of auths."
Should the team be discussing whether to deprecate the "old-style" checks and remove them in v2.0?

@n3101
Copy link
Contributor Author

n3101 commented Aug 24, 2021

@m29827 gchq/Gaffer#2476 has now been merged. Can you submit your PR for this issue now?

@m29827
Copy link
Member

m29827 commented Aug 25, 2021

Hi @n3101 - not at the moment, it requires a version of Gaffer to be built & published containing those changes so the dependency can be updated.

@n3101
Copy link
Contributor Author

n3101 commented Aug 25, 2021

@m29827 Ok thanks.

@n3101 n3101 added this to the v1.20.0 milestone Aug 25, 2021
@n3101
Copy link
Contributor Author

n3101 commented Sep 22, 2021

@m29827 OK, gchq/Gaffer#2476 has now been released in gaffer v1.19. If you can submit your PR for this issue now we will try to get it out in the October release. Cheers.

m29827 added a commit to m29827/gaffer-doc that referenced this issue Sep 22, 2021
@m29827
Copy link
Member

m29827 commented Sep 22, 2021

Hi @n3101, I've updated the dependencies and opened a PR.

@t92549 t92549 modified the milestones: v1.20.0, v1.19.0 Sep 23, 2021
t92549 pushed a commit that referenced this issue Sep 23, 2021
* gh-219 Adding AccessControlledResouce documentation to FederatedStore pages.

* gh-219 Adding AccessControlledResouce documentation to NamedViews documentation

* gh-219 Adding AccessControlledResouce documentation to NamedOperations

* gh-219 Code review comments

* gh-219 Updating Gaffer version.
@t92549 t92549 linked a pull request Sep 23, 2021 that will close this issue
@t92549
Copy link
Contributor

t92549 commented Sep 23, 2021

Resolved by #232

@t92549 t92549 closed this as completed Sep 23, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants