Skip to main content

validate_acl

uqa_sql::catalog::security::object_acl

Function validate_acl 

Source 
pub fn validate_acl(
    owner: RoleIdentity,
    acl: Option<&[ObjectAclEntry]>,
    object_kind: &str,
) -> Result<(), SQLError>
Expand description

Validate the role identities and grant paths of an ACL: every endpoint names a role incarnation, PUBLIC holds no grant option, no grant path repeats, and every grantor’s grant option is reachable from the owner.