Builds a scoped RBAC custom-role source over a repository: one row per
(defining scope, role, permission).
One query per call, for every scope asked about; rows are grouped into
role definitions. AuthPlugin drops a role that would shadow a catalogue role
and a permission outside the catalogue.
Builds a scoped RBAC custom-role source over a repository: one row per (defining scope, role, permission).
One query per call, for every scope asked about; rows are grouped into role definitions. AuthPlugin drops a role that would shadow a catalogue role and a permission outside the catalogue.