sync a58faaa refactor(authz)

2026-10-13 18:28:09 +07:00
parent 5519ae2de7
commit 678885f681
6 changed files with 290 additions and 40 deletions
@@ -29,6 +29,7 @@ MODEL OPA (authz.yml -> data.json):
  matrix [--schema <s>]                 matriks role x tabel (s=select w=write d=ddl)
  show role|user|table <nama>           detail satu objek
  grant add|set|remove <role> <schema.table> [--caps a,b] [--columns x,y|*]
+  grant add <role> '<schema>.*' [--caps a,b]   # seluruh tabel di schema (mis. gold.*)
  role add|remove <nama> [--superuser] [--force]
  user assign|unassign <svc> <role>     service account -> role (model)
  catalog list|add|rename <baru>        kelola catalog (rename ikut berkas Trino)