You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: ydb/docs/en/core/dev/system-views.md
+13-13Lines changed: 13 additions & 13 deletions
Original file line number
Diff line number
Diff line change
@@ -10,7 +10,7 @@ DB system views contain:
10
10
*[Top queries by certain characteristics](#top-queries).
11
11
*[Query details](#query-metrics).
12
12
*[History of overloaded partitions](#top-overload-partitions).
13
-
*[Access control entities](#auth).
13
+
*[Information about users, groups, and access rights](#auth).
14
14
15
15
{% note info %}
16
16
@@ -303,9 +303,9 @@ ORDER BY IntervalEnd desc, CPUCores desc
303
303
304
304
*`"YYYY-MM-DDTHH:MM:SS.UUUUUUZ"`: Time in the UTC 0 zone (`YYYY` stands for year, `MM`, for month, `DD`, for date, `hh`, for hours, `mm`, for minutes, `ss`, for seconds, and `uuuuuu`, for microseconds). For example, `"2023-01-26T13:00:00.000000Z"`.
305
305
306
-
## Access control entities {#auth}
306
+
## Users, groups, and access rights {#auth}
307
307
308
-
The following system views store data for analyzing various [access control entities](../security/authorization.md).
308
+
The following system views contain information about users, access groups, user membership in groups, as well as information about access rights granted to groups or directly to users.
309
309
310
310
### Auth users
311
311
@@ -319,11 +319,11 @@ Table structure:
319
319
|--------|-------------|
320
320
|`Sid`|[SID](../concepts/glossary.md#sid) of the user.<br />Type: `Utf8`.<br />Key: `0`. |
321
321
|`IsEnabled`| Indicates if login is allowed; used for explicit administrator block. Independent of `IsLockedOut`.<br />Type: `Bool`. |
322
-
|`IsLockedOut`|Automatically locked out due to exceeding failed login attempts. Independent of `IsEnabled`.<br />Type: `Bool`. |
322
+
|`IsLockedOut`|Indicates that this user is automatically locked out due to exceeding the number of failed authentication attempts. Independent of `IsEnabled`.<br />Type: `Bool`. |
323
323
|`CreatedAt`| Timestamp of user creation.<br />Type: `Timestamp`. |
324
-
|`LastSuccessfulAttemptAt`| Timestamp of the last successful login attempt.<br />Type: `Timestamp`. |
325
-
|`LastFailedAttemptAt`| Timestamp of the last failed login attempt.<br />Type: `Timestamp`. |
326
-
|`FailedAttemptCount`| Number of failed login attempts.<br />Type: `Uint32`. |
324
+
|`LastSuccessfulAttemptAt`| Timestamp of the last successful authentication attempt.<br />Type: `Timestamp`. |
325
+
|`LastFailedAttemptAt`| Timestamp of the last failed authentication attempt.<br />Type: `Timestamp`. |
326
+
|`FailedAttemptCount`| Number of failed authentication attempts.<br />Type: `Uint32`. |
*`auth_effective_permissions`: Effective access rights, accounting for [inheritance](../concepts/glossary.md#access-right-inheritance).
362
362
363
-
A user can view an[access object](../concepts/glossary.md#access-object)in the results if they have the `ydb.granular.describe_schema` permission on it.
363
+
In this view, the user sees only those[access objects](../concepts/glossary.md#access-object)for which they have the `ydb.granular.describe_schema` permission.
364
364
365
365
Table structure:
366
366
@@ -372,23 +372,23 @@ Table structure:
372
372
373
373
#### Example queries
374
374
375
-
All the directly assigned permissions for the table located at the path`my_table`:
375
+
Retrieving explicitly granted permissions on the access object - table`my_table`:
376
376
377
377
```yql
378
378
SELECT *
379
379
FROM `.sys/auth_permissions`
380
380
WHERE Path = "my_table"
381
381
```
382
382
383
-
All the effective permissions for the table located at the path `my_table`, including inherited permissions:
383
+
Retrieving effective permissions on the access object - table `my_table`:
384
384
385
385
```yql
386
386
SELECT *
387
387
FROM `.sys/auth_effective_permissions`
388
388
WHERE Path = "my_table"
389
389
```
390
390
391
-
All permissions directly assigned to the user identified as`user3`:
391
+
Retrieving the permissions granted to the user `user3`:
392
392
393
393
```yql
394
394
SELECT *
@@ -400,7 +400,7 @@ WHERE Sid = "user3"
400
400
401
401
The `auth_owners` view lists details of [access objects](../concepts/glossary.md#access-object)[ownership](../concepts/glossary.md#access-owner).
402
402
403
-
A user can view an[access object](../concepts/glossary.md#access-object)in the results if they have the `ydb.granular.describe_schema` permission on it.
403
+
In this view, the user sees only those[access objects](../concepts/glossary.md#access-object)for which they have the `ydb.granular.describe_schema` permission.
*[Информацию о текущих пользователях, группах и правах](#auth).
13
+
*[Информацию о пользователях, группах и правах](#auth).
14
14
15
15
{% note info %}
16
16
@@ -305,7 +305,7 @@ ORDER BY IntervalEnd desc, CPUCores desc
305
305
306
306
## Пользователи, группы и права доступа {#auth}
307
307
308
-
Следующие системные представления содержат информацию о пользователях, группах доступа, членстве пользователей в группах, а также информацию о предоставленных правах доступам группам или непосредственно пользователям.
308
+
Следующие системные представления содержат информацию о пользователях, группах доступа, членстве пользователей в группах, а также информацию о предоставленных правах доступам группам или непосредственно пользователям.
309
309
310
310
### Информация о пользователях
311
311
@@ -319,11 +319,11 @@ ORDER BY IntervalEnd desc, CPUCores desc
|`IsEnabled`| Указывает, разрешён ли вход данному пользователю; используется для явной блокировки администратором. Независим от `IsLockedOut`.<br />Тип: `Bool`. |
322
-
|`IsLockedOut`|Автоматическая блокировка из-за превышения количества неудачных попыток входа. Независима от `IsEnabled`.<br />Тип: `Bool`. |
322
+
|`IsLockedOut`|Указывает, что данный пользователь автоматически заблокирован из-за превышения количества неудачных аутентификаций. Независим от `IsEnabled`.<br />Тип: `Bool`. |
323
323
|`CreatedAt`| Время создания пользователя.<br />Тип: `Timestamp`. |
324
324
|`LastSuccessfulAttemptAt`| Время последней успешной аутентификации.<br />Тип: `Timestamp`. |
325
325
|`LastFailedAttemptAt`| Время последней неудачной аутентификации.<br />Тип: `Timestamp`. |
326
-
|`FailedAttemptCount`| Количество неудачных попыток входа.<br />Тип: `Uint32`. |
326
+
|`FailedAttemptCount`| Количество неудачных аутентификаций.<br />Тип: `Uint32`. |
0 commit comments