Skip to content

Commit 7eef392

Browse files
committed
better fixes of some suggestions and en doc
1 parent bce592c commit 7eef392

File tree

2 files changed

+18
-18
lines changed

2 files changed

+18
-18
lines changed

ydb/docs/en/core/dev/system-views.md

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ DB system views contain:
1010
* [Top queries by certain characteristics](#top-queries).
1111
* [Query details](#query-metrics).
1212
* [History of overloaded partitions](#top-overload-partitions).
13-
* [Access control entities](#auth).
13+
* [Information about users, groups, and access rights](#auth).
1414

1515
{% note info %}
1616

@@ -303,9 +303,9 @@ ORDER BY IntervalEnd desc, CPUCores desc
303303

304304
* `"YYYY-MM-DDTHH:MM:SS.UUUUUUZ"`: Time in the UTC 0 zone (`YYYY` stands for year, `MM`, for month, `DD`, for date, `hh`, for hours, `mm`, for minutes, `ss`, for seconds, and `uuuuuu`, for microseconds). For example, `"2023-01-26T13:00:00.000000Z"`.
305305

306-
## Access control entities {#auth}
306+
## Users, groups, and access rights {#auth}
307307

308-
The following system views store data for analyzing various [access control entities](../security/authorization.md).
308+
The following system views contain information about users, access groups, user membership in groups, as well as information about access rights granted to groups or directly to users.
309309

310310
### Auth users
311311

@@ -319,11 +319,11 @@ Table structure:
319319
|--------|-------------|
320320
| `Sid` | [SID](../concepts/glossary.md#sid) of the user.<br />Type: `Utf8`.<br />Key: `0`. |
321321
| `IsEnabled` | Indicates if login is allowed; used for explicit administrator block. Independent of `IsLockedOut`.<br />Type: `Bool`. |
322-
| `IsLockedOut` | Automatically locked out due to exceeding failed login attempts. Independent of `IsEnabled`.<br />Type: `Bool`. |
322+
| `IsLockedOut` | Indicates that this user is automatically locked out due to exceeding the number of failed authentication attempts. Independent of `IsEnabled`.<br />Type: `Bool`. |
323323
| `CreatedAt` | Timestamp of user creation.<br />Type: `Timestamp`. |
324-
| `LastSuccessfulAttemptAt` | Timestamp of the last successful login attempt.<br />Type: `Timestamp`. |
325-
| `LastFailedAttemptAt` | Timestamp of the last failed login attempt.<br />Type: `Timestamp`. |
326-
| `FailedAttemptCount` | Number of failed login attempts.<br />Type: `Uint32`. |
324+
| `LastSuccessfulAttemptAt` | Timestamp of the last successful authentication attempt.<br />Type: `Timestamp`. |
325+
| `LastFailedAttemptAt` | Timestamp of the last failed authentication attempt.<br />Type: `Timestamp`. |
326+
| `FailedAttemptCount` | Number of failed authentication attempts.<br />Type: `Uint32`. |
327327
| `PasswordHash` | JSON string containing password hash, salt, and hash algorithm.<br />Type: `Utf8`. |
328328

329329
### Auth groups
@@ -349,7 +349,7 @@ Table structure:
349349
| Column | Description |
350350
|--------|-------------|
351351
| `GroupSid` | SID of the group.<br />Type: `Utf8`.<br />Key: `0`. |
352-
| `MemberSid` | SID of the group member.<br />Type: `Utf8`.<br />Key: `1`. |
352+
| `MemberSid` | SID of the group member. This can be either the SID of a user or the SID of a group.<br />Type: `Utf8`.<br />Key: `1`. |
353353

354354
### Auth permissions
355355

@@ -360,7 +360,7 @@ Contains two views:
360360
* `auth_permissions`: Directly assigned access rights.
361361
* `auth_effective_permissions`: Effective access rights, accounting for [inheritance](../concepts/glossary.md#access-right-inheritance).
362362

363-
A user can view an [access object](../concepts/glossary.md#access-object) in the results if they have the `ydb.granular.describe_schema` permission on it.
363+
In this view, the user sees only those [access objects](../concepts/glossary.md#access-object) for which they have the `ydb.granular.describe_schema` permission.
364364

365365
Table structure:
366366

@@ -372,23 +372,23 @@ Table structure:
372372

373373
#### Example queries
374374

375-
All the directly assigned permissions for the table located at the path `my_table`:
375+
Retrieving explicitly granted permissions on the access object - table `my_table`:
376376

377377
```yql
378378
SELECT *
379379
FROM `.sys/auth_permissions`
380380
WHERE Path = "my_table"
381381
```
382382

383-
All the effective permissions for the table located at the path `my_table`, including inherited permissions:
383+
Retrieving effective permissions on the access object - table `my_table`:
384384

385385
```yql
386386
SELECT *
387387
FROM `.sys/auth_effective_permissions`
388388
WHERE Path = "my_table"
389389
```
390390

391-
All permissions directly assigned to the user identified as `user3`:
391+
Retrieving the permissions granted to the user `user3`:
392392

393393
```yql
394394
SELECT *
@@ -400,7 +400,7 @@ WHERE Sid = "user3"
400400

401401
The `auth_owners` view lists details of [access objects](../concepts/glossary.md#access-object) [ownership](../concepts/glossary.md#access-owner).
402402

403-
A user can view an [access object](../concepts/glossary.md#access-object) in the results if they have the `ydb.granular.describe_schema` permission on it.
403+
In this view, the user sees only those [access objects](../concepts/glossary.md#access-object) for which they have the `ydb.granular.describe_schema` permission.
404404

405405
Table structure:
406406

ydb/docs/ru/core/dev/system-views.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010
* [Топы запросов по определенным характеристикам](#top-queries).
1111
* [Подробная информация о запросах](#query-metrics).
1212
* [История перегруженных партиций](#top-overload-partitions).
13-
* [Информацию о текущих пользователях, группах и правах](#auth).
13+
* [Информацию о пользователях, группах и правах](#auth).
1414

1515
{% note info %}
1616

@@ -305,7 +305,7 @@ ORDER BY IntervalEnd desc, CPUCores desc
305305

306306
## Пользователи, группы и права доступа {#auth}
307307

308-
Следующие системные представления содержат информацию о пользователях, группах доступа, членстве пользователей в группах, а также информацию о предоставленных правах доступам группам или непосредственно пользователям.
308+
Следующие системные представления содержат информацию о пользователях, группах доступа, членстве пользователей в группах, а также информацию о предоставленных правах доступам группам или непосредственно пользователям.
309309

310310
### Информация о пользователях
311311

@@ -319,11 +319,11 @@ ORDER BY IntervalEnd desc, CPUCores desc
319319
|---------|----------|
320320
| `Sid` | [SID](../concepts/glossary.md#sid) пользователя.<br />Тип: `Utf8`.<br />Ключ: `0`. |
321321
| `IsEnabled` | Указывает, разрешён ли вход данному пользователю; используется для явной блокировки администратором. Независим от `IsLockedOut`.<br />Тип: `Bool`. |
322-
| `IsLockedOut` | Автоматическая блокировка из-за превышения количества неудачных попыток входа. Независима от `IsEnabled`.<br />Тип: `Bool`. |
322+
| `IsLockedOut` | Указывает, что данный пользователь автоматически заблокирован из-за превышения количества неудачных аутентификаций. Независим от `IsEnabled`.<br />Тип: `Bool`. |
323323
| `CreatedAt` | Время создания пользователя.<br />Тип: `Timestamp`. |
324324
| `LastSuccessfulAttemptAt` | Время последней успешной аутентификации.<br />Тип: `Timestamp`. |
325325
| `LastFailedAttemptAt` | Время последней неудачной аутентификации.<br />Тип: `Timestamp`. |
326-
| `FailedAttemptCount` | Количество неудачных попыток входа.<br />Тип: `Uint32`. |
326+
| `FailedAttemptCount` | Количество неудачных аутентификаций.<br />Тип: `Uint32`. |
327327
| `PasswordHash` | JSON-строка, содержащая хеш пароля, соль и алгоритм хеширования.<br />Тип: `Utf8`. |
328328

329329
### Информация о группах
@@ -372,7 +372,7 @@ ORDER BY IntervalEnd desc, CPUCores desc
372372

373373
#### Примеры запросов
374374

375-
Получение предоставленных прав на объект доступа - таблицу `my_table`:
375+
Получение явно предоставленных прав на объект доступа - таблицу `my_table`:
376376

377377
```yql
378378
SELECT *

0 commit comments

Comments
 (0)