You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -153,7 +153,7 @@ This feature introduces a new **sharing mechanism** called **scopes**. Scopes de
153
153
154
154
Each plugin must **document its scope definitions** so that users understand the **sharing semantics** and how different scopes affect access control.
155
155
156
-
Scopes enable **granular access control**, allowing resources to be shared with **customized permission levels**, making the system more flexible and adaptable to different use cases.
156
+
Scopes enable **granular access control**, allowing shareableResources to be shared with **customized permission levels**, making the system more flexible and adaptable to different use cases.
157
157
158
158
### **Common Scopes for Plugins to declare**
159
159
| Scope | Description |
@@ -162,7 +162,7 @@ Scopes enable **granular access control**, allowing resources to be shared with
162
162
|`READ_ONLY`| Users can view but not modify the resource. |
163
163
|`READ_WRITE`| Users can view and modify the resource. |
164
164
165
-
By default, all resources are private and only visible to the owner and super-admins. Resources become accessible to others only when explicitly shared.
165
+
By default, all shareableResources are private and only visible to the owner and super-admins. Resources become accessible to others only when explicitly shared.
166
166
167
167
SPI provides you an interface, with two default scopes `PUBLIC` and `RESTRICTED`, which can be extended to introduce more plugin-specific values.
168
168
@@ -451,7 +451,7 @@ Returns an array of accessible resources.
451
451
---
452
452
453
453
## **Conclusion**
454
-
The **Resource Sharing and Access Control** feature enhances OpenSearch security by introducing an **additional layer of fine-grained access management** for plugin-defined resources. While **Fine-Grained Access Control (FGAC)** is already enabled, this feature provides **even more granular control** specifically for **resource-level access** within plugins.
454
+
The **Resource Sharing and Access Control** feature enhances OpenSearch security by introducing an **additional layer of fine-grained access management** for plugin-defined shareableResources. While **Fine-Grained Access Control (FGAC)** is already enabled, this feature provides **even more granular control** specifically for **resource-level access** within plugins.
455
455
456
456
By implementing the **Service Provider Interface (SPI)**, utilizing the **security client**, and following **best practices**, developers can seamlessly integrate this feature into their plugins to enforce controlled resource sharing and access management.
The **`ResourceSharingClient`** provides **four Java APIs** for **resource access control**, enabling plugins to **verify, share, revoke, and list**resources.
82
+
The **`ResourceSharingClient`** provides **four Java APIs** for **resource access control**, enabling plugins to **verify, share, revoke, and list**shareableResources.
System.err.println("Failed to list accessible resources: "+ e.getMessage());
204
+
System.err.println("Failed to list accessible shareableResources: "+ e.getMessage());
205
205
})
206
206
);
207
207
```
208
-
> **Use Case:** Helps a user identify **which resources they can interact with**.
208
+
> **Use Case:** Helps a user identify **which shareableResources they can interact with**.
209
209
210
210
---
211
211
@@ -214,7 +214,7 @@ These APIs provide essential methods for **fine-grained resource access control*
214
214
215
215
✔ **Verification** of resource access.
216
216
✔ **Granting and revoking** access dynamically.
217
-
✔ **Retrieval** of all accessible resources.
217
+
✔ **Retrieval** of all accessible shareableResources.
218
218
219
219
For further details, refer to the [`ResourceSharingClient` Java class](../client/src/main/java/org/opensearch/security/client/resources/ResourceSharingClient.java).
0 commit comments