Clarify docs for multiple access controls #24549
Conversation
| the default `etc/access-control.properties`. Relative paths from the Trino | ||
| `INSTALL_PATH` or absolute paths are supported. | ||
|
|
||
| The configured access control systems are used in order until access rights are |
There was a problem hiding this comment.
I am not sure about this .. also would be good to explain more with an example.
There was a problem hiding this comment.
I believe this is true, but ordering shouldn't matter. Each access control is independent from the others.
| the default `etc/access-control.properties`. Relative paths from the Trino | ||
| `INSTALL_PATH` or absolute paths are supported. | ||
|
|
||
| The configured access control systems are used in order until access rights are |
There was a problem hiding this comment.
I believe this is true, but ordering shouldn't matter. Each access control is independent from the others.
| `INSTALL_PATH` or absolute paths are supported. | ||
|
|
||
| The configured access control systems are used in order until access rights are | ||
| either granted or denied, and must use different types. Each system is |
There was a problem hiding this comment.
This is actually "access is granted if none of the access controls denies it" - or: all access controls must allow. But if there are no access controls at all, all access is allowed. That's at the engine level (which is of interest here) and not to be confused with how each individual access control works.
| `INSTALL_PATH` or absolute paths are supported. | ||
|
|
||
| The configured access control systems are used in order until access rights are | ||
| either granted or denied, and must use different types. Each system is |
There was a problem hiding this comment.
Not sure what you mean by "different types"?
Description
Centralize and clarify usage with multiple access control systems.
Additional context and related issues
See #20152
Release notes
(x) This is not user-visible or is docs only, and no release notes are required.