Skip to content

Commit 75252ed

Browse files
chore: add CREATE DATABASE/WAREHOUSE privlege type (#2143)
Co-authored-by: z <[email protected]>
1 parent 55fddd2 commit 75252ed

File tree

1 file changed

+38
-35
lines changed

1 file changed

+38
-35
lines changed

docs/en/guides/56-security/access-control/01-privileges.md

Lines changed: 38 additions & 35 deletions
Original file line numberDiff line numberDiff line change
@@ -104,42 +104,46 @@ Databend offers a range of privileges that allow you to exercise fine-grained co
104104

105105
### All Privileges
106106

107-
| Privilege | Object Type | Description |
108-
|:-------------|:------------------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------|
109-
| ALL | All | Grants all the privileges for the specified object type. |
110-
| ALTER | Global, Database, Table, View | Alters a database, table, user or UDF. |
111-
| CREATE | Global, Database, Table | Creates a database, table or UDF. |
112-
| DELETE | Table | Deletes or truncates rows in a table. |
113-
| DROP | Global, Database, Table, View | Drops a database, table, view or UDF. Undrops a table. |
114-
| INSERT | Table | Inserts rows into a table. |
115-
| SELECT | Database, Table | Selects rows from a table. Shows or uses a database. |
116-
| UPDATE | Table | Updates rows in a table. |
117-
| GRANT | Global | Grants / revokes privileges to / from a user or role. |
118-
| SUPER | Global, Table | Kills a query. Sets global configs. Optimizes a table. Analyzes a table. Operates a stage(Lists stages. Creates, Drops a stage), catalog or share. |
119-
| USAGE | Global | Synonym for “no privileges”. |
120-
| CREATE ROLE | Global | Creates a role. |
121-
| DROP ROLE | Global | Drops a role. |
122-
| CREATE USER | Global | Creates a SQL user. |
123-
| DROP USER | Global | Drops a SQL user. |
124-
| WRITE | Stage | Write into a stage. |
125-
| READ | Stage | Read a stage. |
126-
| USAGE | UDF | Use udf. |
107+
| Privilege | Object Type | Description |
108+
|:-----------------|:------------------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------|
109+
| ALL | All | Grants all the privileges for the specified object type. |
110+
| ALTER | Global, Database, Table, View | Alters a database, table, user or UDF. |
111+
| CREATE | Global, Table | Creates a table or UDF. |
112+
| CREATE DATABASE | Global | Creates a database, table or UDF. |
113+
| CREATE WAREHOUSE | Global | Creates a warehouse. |
114+
| DELETE | Table | Deletes or truncates rows in a table. |
115+
| DROP | Global, Database, Table, View | Drops a database, table, view or UDF. Undrops a table. |
116+
| INSERT | Table | Inserts rows into a table. |
117+
| SELECT | Database, Table | Selects rows from a table. Shows or uses a database. |
118+
| UPDATE | Table | Updates rows in a table. |
119+
| GRANT | Global | Grants / revokes privileges to / from a user or role. |
120+
| SUPER | Global, Table | Kills a query. Sets global configs. Optimizes a table. Analyzes a table. Operates a stage(Lists stages. Creates, Drops a stage), catalog or share. |
121+
| USAGE | Global | Synonym for “no privileges”. |
122+
| CREATE ROLE | Global | Creates a role. |
123+
| DROP ROLE | Global | Drops a role. |
124+
| CREATE USER | Global | Creates a SQL user. |
125+
| DROP USER | Global | Drops a SQL user. |
126+
| WRITE | Stage | Write into a stage. |
127+
| READ | Stage | Read a stage. |
128+
| USAGE | UDF | Use udf. |
127129

128130
### Global Privileges
129131

130-
| Privilege | Description |
131-
|:-----------|:------------------------------------------------------------------------------------------------------------------|
132-
| ALL | Grants all the privileges for the specified object type. |
133-
| ALTER | Adds or drops a table column. Alters a cluster key. Re-clusters a table. |
134-
| CREATEROLE | Creates a role. |
135-
| DROPUSER | Drops a user. |
136-
| CREATEUSER | Creates a user. |
137-
| DROPROLE | Drops a role. |
138-
| SUPER | Kills a query. Sets or unsets a setting. Operates a stage, catalog or share. Calls a function. COPY INTO a stage. |
139-
| USAGE | Connects to a databend query only. |
140-
| CREATE | Creates a UDF. |
141-
| DROP | Drops a UDF. |
142-
| ALTER | Alters a UDF. Alters a SQL user. |
132+
| Privilege | Description |
133+
|:-----------------|:------------------------------------------------------------------------------------------------------------------|
134+
| ALL | Grants all the privileges for the specified object type. |
135+
| ALTER | Adds or drops a table column. Alters a cluster key. Re-clusters a table. |
136+
| CREATEROLE | Creates a role. |
137+
| CREAT DATABASE | Creates a DATABASE. |
138+
| CREATE WAREHOUSE | Creates a WAREHOUSE. |
139+
| DROPUSER | Drops a user. |
140+
| CREATEUSER | Creates a user. |
141+
| DROPROLE | Drops a role. |
142+
| SUPER | Kills a query. Sets or unsets a setting. Operates a stage, catalog or share. Calls a function. COPY INTO a stage. |
143+
| USAGE | Connects to a databend query only. |
144+
| CREATE | Creates a UDF. |
145+
| DROP | Drops a UDF. |
146+
| ALTER | Alters a UDF. Alters a SQL user. |
143147

144148
### Table Privileges
145149

@@ -171,7 +175,6 @@ Please note that you can use the [USE DATABASE](/sql/sql-commands/ddl/database/d
171175
| Privilege | Description |
172176
|:----------|:-----------------------------------------------------------------------------------------------------------------|
173177
| ALTER | Renames a database. |
174-
| CREATE | Creates a database. |
175178
| DROP | Drops or undrops a database. Restores the recent version of a dropped database. |
176179
| SELECT | SHOW CREATE a database. |
177180
| OWNERSHIP | Grants full control over a database. Only a single role can hold this privilege on a specific object at a time. |
@@ -220,4 +223,4 @@ Please note that you can use the [USE DATABASE](/sql/sql-commands/ddl/database/d
220223
| Privilege | Description |
221224
|:----------|:---------------------------------------------------------|
222225
| SUPER | SHOW CREATE catalog. Creates or drops a catalog. |
223-
| ALL | Grants all the privileges for the specified object type. |
226+
| ALL | Grants all the privileges for the specified object type. |

0 commit comments

Comments
 (0)