set_role_permissions

The set_role_permissions operator lets you assign permissions to the specified role. Available only in the Enterprise Edition.

SciDB security mode must be correctly configured before this or any security operator can be used.  See the Security section of the SciDB Administration Guide.

Synopsis

set_role_permissions('role', 'entity_type', 'entity_name', 'permissions')

set_role_permissions('role', namespace_name, 'permissions')

Inputs

In the first form, all input parameters are literal strings enclosed in single quotes.

  • role – Name of the role whose associated access permissions are to be modified.
  • entity_type – Type of the entity to which the permissions give access.  The only valid entity type is 'namespace'.
  • entity_name – Name of the entity to which the permissions give access (that is, the namespace name).
  • permissions – String composed of permission codes, described below.  May be an empty string.

In the second form, an unquoted namespace name is recognized as entity type 'namespace'.

Summary

  • The set_role_permissions operator associates the role with a set of access rights on an entity.
  • In this release, the only supported entity_type is 'namespace'.  You may also use the shorthand abbreviation 'ns' here.
  • The allowable permission codes are:
    • c – create array within namespace
    • r – read array within namespace
    • u – update (write) array within namespace
    • d – delete array within namespace
    • l (ell) – list arrays within namespace