Skip to content

[DOC-13661] Update RBAC for SQL++ (Capella)#482

Open
rakhi-prathap wants to merge 17 commits intocapellafrom
DOC-13661-sqlpp-rbac
Open

[DOC-13661] Update RBAC for SQL++ (Capella)#482
rakhi-prathap wants to merge 17 commits intocapellafrom
DOC-13661-sqlpp-rbac

Conversation

@rakhi-prathap
Copy link
Contributor

@rakhi-prathap rakhi-prathap commented Nov 26, 2025

PR to simplify and fix RBAC content for SQL++ statements (for Capella).

Updating the scope to add fine-grained RBAC.

Key changes include:

  • Replacing privileges like query_select, query_manage_index, etc., with more high-level privileges like Read and Write.
  • Adding fine-grained RBAC.
  • Matching terminologies on the Capella UI.
  • Removing server-specific terms.

Preview site:

Comment on lines 60 to 62
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This note does not seem relevant to MERGE statements. Confirm with SME.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ANSI Merge Insert and ANSI Merge Update both let you specify the expiration, so I think it does apply here.

@rakhi-prathap rakhi-prathap marked this pull request as ready for review November 26, 2025 10:18
@rakhi-prathap
Copy link
Contributor Author

Currently, RBAC privileges are not listed for the following statements:

  • BEGIN TRANSACTION
  • COMMIT TRANSACTION
  • EXECUTE
  • ROLLBACK TRANSACTION
  • SAVEPOINT
  • SET TRANSACTION
  • UPDATE STATISTICS

@simon-dew
Copy link
Contributor

Waiting for fine-grained RBAC for Capella to be released before looking at this again

Copy link
Contributor

@simon-dew simon-dew left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for this! I've checked the cluster access privileges against PRD: Fine grained RBAC in Capella and provided the names of the advanced Capella privileges, where required.

Note that there are Capella privileges for managing and executing query functions, so CREATE FUNCTION, DROP FUNCTION, EXECUTE FUNCTION, and EXPLAIN FUNCTION should all be available via cluster access credentials.

rakhi-prathap and others added 7 commits February 18, 2026 09:58
Co-authored-by: Simon Dew <39966290+simon-dew@users.noreply.github.com>
Co-authored-by: Simon Dew <39966290+simon-dew@users.noreply.github.com>
@rakhi-prathap
Copy link
Contributor Author

@simon-dew I've updated the PR to add fine-grained RBAC. Could you please take another look at this? Thanks!

@rakhi-prathap rakhi-prathap requested a review from simon-dew March 3, 2026 12:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants