milvus/pkg/util/paramtable/role_param.go
PowderLi bcd6865b29
enhance: add 3 builtin roles (#28961)
issue: #28960 [milvus-proto
#212](https://github.com/milvus-io/milvus-proto/issues/212)

add new configuration: builtinRoles
user can define roles in config file: `milvus.yaml`

there is an example:
1. db_ro, only have read privileges, include load
2. db_rw, read and write privileges, include create/drop/rename
collection
3. db_admin, not only read and write privileges, but also user
administration

Signed-off-by: PowderLi <min.li@zilliz.com>
2023-12-18 14:28:41 +08:00

46 lines
1.0 KiB
Go

package paramtable
import (
"github.com/milvus-io/milvus/pkg/config"
"github.com/milvus-io/milvus/pkg/util/funcutil"
)
type roleConfig struct {
Enabled ParamItem `refreshable:"false"`
Roles ParamItem `refreshable:"false"`
}
func (p *roleConfig) init(base *BaseTable) {
p.Enabled = ParamItem{
Key: "builtinRoles.enable",
DefaultValue: "false",
Version: "2.3.4",
Doc: "Whether to init builtin roles",
Export: true,
}
p.Enabled.Init(base.mgr)
p.Roles = ParamItem{
Key: "builtinRoles.roles",
DefaultValue: `{}`,
Version: "2.3.4",
Doc: "what builtin roles should be init",
Export: true,
}
p.Roles.Init(base.mgr)
p.panicIfNotValid(base.mgr)
}
func (p *roleConfig) panicIfNotValid(mgr *config.Manager) {
if p.Enabled.GetAsBool() {
m := p.Roles.GetAsRoleDetails()
if m == nil {
panic("builtinRoles.roles not invalid, should be json format")
}
j := funcutil.RoleDetailsToJSON(m)
mgr.SetConfig("builtinRoles.roles", string(j))
}
}