xunliu commented on code in PR #7845:
URL: https://github.com/apache/gravitino/pull/7845#discussion_r2244228788


##########
docs/security/access-control.md:
##########
@@ -46,6 +46,21 @@ Gravitino doesn't support metadata authentication. It means 
that Gravitino won't
 
 ### Authorization
 
+#### Build-in Authorization
+
+Gravitino provides built-in metadata authorization. You can enable the 
built-in metadata authorization through the following configuration.
+```
+gravitino.authorization.enable = true
+gravitino.authorization.impl = 
org.apache.gravitino.server.authorization.jcasbin.JcasbinAuthorizer

Review Comment:
   I think metadata authentication is not yet mature enough. 
   If it is enabled by default, users may not know how to set permissions and 
be unable to use it, 
   so I recommend not enabling it by default.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to