[teiid-dev] Security nomenclature

[Steven Hawkins]

Hello all,

We should ensure that we have similar names for security concepts in Teiid/Designer/Docs.  Here's where we are coming from:

MetaMatirx pre-5.5

entitlements - general term for applying CRUD permissions to a VDB.
entitlement - a named set of permissions and principles
data-policy - internal name for the permission collection of an entitlement.  Internally these were referenced as policies in a system that resembled JAAS.
permission - an action and target
principle - a user or group identified by a unique name.

MetaMatrix 5.5

data roles - general term for applying CRUD permissions to a VDB, although the term "entitlements" was still in use in many places.
data role - a named set of permissions and groups - note that this was a restriction of the possible principles to only groups.
permission - same as before

Teiid Current

same as 5.5.

Moving forward I would propose purging the terms entitlement/entitlements.  We should also correct the vdb-deployer.xsd so that data-policy becomes data-role.  Optionally we could also consider converting the permission element children to attributes to condense the information a little.  These would be a breaking changes, but should be done before the Designer feature is in place.

Steve