regex_policy is an Authorization plugin that uses regex patterns to match policies.
To load this plugin, start drizzled with:
--plugin-add=regex_policy
Loading the plugin may not enable or configure it. See the plugin’s Configuration and Variables.
See also
Plugin Options for more information about adding and removing plugins.
These command line options configure the plugin when drizzled is started. See Command Line Options for more information about specifying command line options.
Default : | drizzle.policy |
---|---|
Variable : | regex_policy_policy |
File to load for regex authorization policies.
These variables show the running configuration of the plugin. See variables for more information about querying and setting variables.
regex_policy_policy
Scope: Global Dynamic: No Option: --regex-policy.policy File to load for regex authorization policies.
The general line format of a regex policy file is:
USER_PATTERN SCHEMA_OBJECT_PATTERN POLICY
For example:
# This is a comment line and should be skipped
.+ schema=DATA_DICTIONARY ACCEPT
.+ schema=INFORMATION_SCHEMA ACCEPT
.+ schema=data_dictionary ACCEPT
.+ schema=information_schema ACCEPT
root table=.+ ACCEPT
root schema=.+ ACCEPT
root process=.+ ACCEPT
user1 schema=user1 ACCEPT
user2 schema=user2 ACCEPT
user1 process=user1 ACCEPT
user2 process=user2 ACCEPT
# Default to denying everything
.+ schema=.+ DENY
.+ process=.+ DENY
Sorry, there are no examples for this plugin.
Clint Byrum
This documentation applies to regex_policy 1.0.
To see which version of the plugin a Drizzle server is running, execute:
SELECT MODULE_VERSION FROM DATA_DICTIONARY.MODULES WHERE MODULE_NAME='regex_policy'