From 073e3e4f7f31d540959a9339d4a17dcd3e3c6095 Mon Sep 17 00:00:00 2001 From: Hannes Sandberg Date: Wed, 11 Dec 2024 14:43:41 +0100 Subject: [PATCH 1/3] Update REVOKE information to say that in cypher 25 you get errors for impossible revoke commands --- .../authentication-authorization/database-administration.adoc | 2 +- .../pages/authentication-authorization/manage-privileges.adoc | 2 +- .../ROOT/pages/authentication-authorization/manage-roles.adoc | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/modules/ROOT/pages/authentication-authorization/database-administration.adoc b/modules/ROOT/pages/authentication-authorization/database-administration.adoc index 62888c9ab..16808b463 100644 --- a/modules/ROOT/pages/authentication-authorization/database-administration.adoc +++ b/modules/ROOT/pages/authentication-authorization/database-administration.adoc @@ -179,7 +179,7 @@ Use `REVOKE` if you want to remove a privilege. ==== Common errors, such as misspellings or attempts to revoke privileges that have not been granted or denied, will lead to notifications. -Some of these notifications may be replaced with errors in a future major version of Neo4j. +Some of these notifications have been replaced with errors in Cypher 25. See link:{neo4j-docs-base-uri}/status-codes/{page-version}/notifications/all-notifications[Status Codes for Errors & Notifications -> Server notifications] for details on notifications. The hierarchy between the different database privileges is shown in the image below. diff --git a/modules/ROOT/pages/authentication-authorization/manage-privileges.adoc b/modules/ROOT/pages/authentication-authorization/manage-privileges.adoc index 5e6851547..0e5469d8d 100644 --- a/modules/ROOT/pages/authentication-authorization/manage-privileges.adoc +++ b/modules/ROOT/pages/authentication-authorization/manage-privileges.adoc @@ -197,7 +197,7 @@ Use `REVOKE` if you want to remove a privilege. ==== Common errors, such as misspellings or attempts to revoke privileges that have not been granted or denied, will result in notifications. -Some of these notifications may be replaced with errors in a future major version of Neo4j. +Some of these notifications have been replaced with errors in Cypher 25. See link:{neo4j-docs-base-uri}/status-codes/{page-version}/notifications/all-notifications[Status Codes -> Notification codes] for details on notifications. The general `GRANT` and `DENY` syntaxes are illustrated in the following image: diff --git a/modules/ROOT/pages/authentication-authorization/manage-roles.adoc b/modules/ROOT/pages/authentication-authorization/manage-roles.adoc index ba8e170b5..e13064d96 100644 --- a/modules/ROOT/pages/authentication-authorization/manage-roles.adoc +++ b/modules/ROOT/pages/authentication-authorization/manage-roles.adoc @@ -814,7 +814,7 @@ REVOKE ROLES role1, role2 FROM user1, user2, user3 ---- Common errors, such as misspellings or attempts to revoke roles from users who have not been granted those roles, will lead to notifications. -Some of these notifications may be replaced with errors in a future major version of Neo4j. +Some of these notifications have been replaced with errors in Cypher 25. See link:{neo4j-docs-base-uri}/status-codes/{page-version}/notifications/all-notifications[Status Codes -> Notification codes] for details on notifications. [[access-control-drop-roles]] From 449d07220780d1b913e71c1d00c3d1ae04ec1319 Mon Sep 17 00:00:00 2001 From: Hannes Sandberg Date: Wed, 15 Jan 2025 11:18:10 +0100 Subject: [PATCH 2/3] more specified in which cases we will throw an error in Cypher 25 --- .../authentication-authorization/database-administration.adoc | 2 +- .../pages/authentication-authorization/manage-privileges.adoc | 2 +- .../ROOT/pages/authentication-authorization/manage-roles.adoc | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/modules/ROOT/pages/authentication-authorization/database-administration.adoc b/modules/ROOT/pages/authentication-authorization/database-administration.adoc index 16808b463..cbc296b5b 100644 --- a/modules/ROOT/pages/authentication-authorization/database-administration.adoc +++ b/modules/ROOT/pages/authentication-authorization/database-administration.adoc @@ -179,7 +179,7 @@ Use `REVOKE` if you want to remove a privilege. ==== Common errors, such as misspellings or attempts to revoke privileges that have not been granted or denied, will lead to notifications. -Some of these notifications have been replaced with errors in Cypher 25. +Notifications for impossible `REVOKE` commands where any of the user, role or database does not exist have been replaced with errors in Cypher 25. See link:{neo4j-docs-base-uri}/status-codes/{page-version}/notifications/all-notifications[Status Codes for Errors & Notifications -> Server notifications] for details on notifications. The hierarchy between the different database privileges is shown in the image below. diff --git a/modules/ROOT/pages/authentication-authorization/manage-privileges.adoc b/modules/ROOT/pages/authentication-authorization/manage-privileges.adoc index 0e5469d8d..b478fc21d 100644 --- a/modules/ROOT/pages/authentication-authorization/manage-privileges.adoc +++ b/modules/ROOT/pages/authentication-authorization/manage-privileges.adoc @@ -197,7 +197,7 @@ Use `REVOKE` if you want to remove a privilege. ==== Common errors, such as misspellings or attempts to revoke privileges that have not been granted or denied, will result in notifications. -Some of these notifications have been replaced with errors in Cypher 25. +Notifications for impossible `REVOKE` commands where any of the user, role or database does not exist have been replaced with errors in Cypher 25. See link:{neo4j-docs-base-uri}/status-codes/{page-version}/notifications/all-notifications[Status Codes -> Notification codes] for details on notifications. The general `GRANT` and `DENY` syntaxes are illustrated in the following image: diff --git a/modules/ROOT/pages/authentication-authorization/manage-roles.adoc b/modules/ROOT/pages/authentication-authorization/manage-roles.adoc index e13064d96..19e1e9d42 100644 --- a/modules/ROOT/pages/authentication-authorization/manage-roles.adoc +++ b/modules/ROOT/pages/authentication-authorization/manage-roles.adoc @@ -814,7 +814,7 @@ REVOKE ROLES role1, role2 FROM user1, user2, user3 ---- Common errors, such as misspellings or attempts to revoke roles from users who have not been granted those roles, will lead to notifications. -Some of these notifications have been replaced with errors in Cypher 25. +Notifications for impossible `REVOKE` commands where any of the user, role or database does not exist have been replaced with errors in Cypher 25. See link:{neo4j-docs-base-uri}/status-codes/{page-version}/notifications/all-notifications[Status Codes -> Notification codes] for details on notifications. [[access-control-drop-roles]] From cc7e13d89033fdce6c42db80e134b03f58bcd180 Mon Sep 17 00:00:00 2001 From: Hannes Sandberg Date: Thu, 16 Jan 2025 13:12:22 +0100 Subject: [PATCH 3/3] review fixes --- .../authentication-authorization/database-administration.adoc | 2 +- .../pages/authentication-authorization/manage-privileges.adoc | 2 +- .../ROOT/pages/authentication-authorization/manage-roles.adoc | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/modules/ROOT/pages/authentication-authorization/database-administration.adoc b/modules/ROOT/pages/authentication-authorization/database-administration.adoc index cbc296b5b..b90723fd5 100644 --- a/modules/ROOT/pages/authentication-authorization/database-administration.adoc +++ b/modules/ROOT/pages/authentication-authorization/database-administration.adoc @@ -179,7 +179,7 @@ Use `REVOKE` if you want to remove a privilege. ==== Common errors, such as misspellings or attempts to revoke privileges that have not been granted or denied, will lead to notifications. -Notifications for impossible `REVOKE` commands where any of the user, role or database does not exist have been replaced with errors in Cypher 25. +In Cypher 25, notifications for impossible `REVOKE` commands, where a user, a role, or a database does not exist, have been replaced with errors. See link:{neo4j-docs-base-uri}/status-codes/{page-version}/notifications/all-notifications[Status Codes for Errors & Notifications -> Server notifications] for details on notifications. The hierarchy between the different database privileges is shown in the image below. diff --git a/modules/ROOT/pages/authentication-authorization/manage-privileges.adoc b/modules/ROOT/pages/authentication-authorization/manage-privileges.adoc index b478fc21d..24ab1fd9b 100644 --- a/modules/ROOT/pages/authentication-authorization/manage-privileges.adoc +++ b/modules/ROOT/pages/authentication-authorization/manage-privileges.adoc @@ -197,7 +197,7 @@ Use `REVOKE` if you want to remove a privilege. ==== Common errors, such as misspellings or attempts to revoke privileges that have not been granted or denied, will result in notifications. -Notifications for impossible `REVOKE` commands where any of the user, role or database does not exist have been replaced with errors in Cypher 25. +In Cypher 25, notifications for impossible `REVOKE` commands, where a user, a role, or a database does not exist, have been replaced with errors. See link:{neo4j-docs-base-uri}/status-codes/{page-version}/notifications/all-notifications[Status Codes -> Notification codes] for details on notifications. The general `GRANT` and `DENY` syntaxes are illustrated in the following image: diff --git a/modules/ROOT/pages/authentication-authorization/manage-roles.adoc b/modules/ROOT/pages/authentication-authorization/manage-roles.adoc index 19e1e9d42..0be1fe591 100644 --- a/modules/ROOT/pages/authentication-authorization/manage-roles.adoc +++ b/modules/ROOT/pages/authentication-authorization/manage-roles.adoc @@ -814,7 +814,7 @@ REVOKE ROLES role1, role2 FROM user1, user2, user3 ---- Common errors, such as misspellings or attempts to revoke roles from users who have not been granted those roles, will lead to notifications. -Notifications for impossible `REVOKE` commands where any of the user, role or database does not exist have been replaced with errors in Cypher 25. +In Cypher 25, notifications for impossible `REVOKE` commands, where a user, a role, or a database does not exist, have been replaced with errors. See link:{neo4j-docs-base-uri}/status-codes/{page-version}/notifications/all-notifications[Status Codes -> Notification codes] for details on notifications. [[access-control-drop-roles]]