Hello all,
We should ensure that we have similar names for security concepts in Teiid/Designer/Docs.
Here's where we are coming from:
MetaMatirx pre-5.5
entitlements - general term for applying CRUD permissions to a VDB.
entitlement - a named set of permissions and principles
data-policy - internal name for the permission collection of an entitlement. Internally
these were referenced as policies in a system that resembled JAAS.
permission - an action and target
principle - a user or group identified by a unique name.
MetaMatrix 5.5
data roles - general term for applying CRUD permissions to a VDB, although the term
"entitlements" was still in use in many places.
data role - a named set of permissions and groups - note that this was a restriction of
the possible principles to only groups.
permission - same as before
Teiid Current
same as 5.5.
Moving forward I would propose purging the terms entitlement/entitlements. We should also
correct the vdb-deployer.xsd so that data-policy becomes data-role. Optionally we could
also consider converting the permission element children to attributes to condense the
information a little. These would be a breaking changes, but should be done before the
Designer feature is in place.
Steve