Skip to content

Conversation

@Josipmrden
Copy link
Contributor

@Josipmrden Josipmrden commented Nov 19, 2025

Release note

Upgrade to the migration message

Checklist:

  • Add appropriate milestone (current release cycle)
  • Add bugfix or feature label, based on the product PR type you're documenting
  • Make sure all relevant tech details are documented
  • Check all content with Grammarly
  • Perform a self-review of my code
  • The build passes locally
  • My changes generate no new warnings or errors

Note

Overhauls the v3.7 label-based access control migration guide with flexible label matching, discrete permissions, updated syntax, step-by-step migration workflow, and examples.

  • Docs — MLBAC v3.7 Migration Guide (pages/.../mlbac-migration-guide.mdx)
    • Conceptual updates:
      • Add motivation and explain new node label matching modes (MATCHING ANY/MATCHING EXACTLY).
      • Change from hierarchical to discrete permissions (CREATE, READ, UPDATE, DELETE).
    • Syntax and examples:
      • Update syntax table (e.g., ON NODES CONTAINING LABELS, OF TYPE) and add MATCHING variants.
      • Provide example rewrites for common pre-v3.7 privileges.
    • Migration workflow:
      • Add step-by-step sections using Steps for pre-upgrade export/backup, verification, rule recreation, and testing.
      • Clarify automatic migrations (global * mapping) vs. manual recreation (per-label and per-edge rules) with a warning callout.
    • Misc:
      • Refine warning copy, fix backup command, add example scenario, and link to changelog.

Written by Cursor Bugbot for commit 439f5f0. This will update automatically on new commits. Configure here.

@Josipmrden Josipmrden self-assigned this Nov 19, 2025
@vercel
Copy link

vercel bot commented Nov 19, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
documentation Ready Ready Preview Comment Nov 19, 2025 0:50am

@Josipmrden Josipmrden changed the base branch from main to memgraph-3-7 November 19, 2025 10:18
@Josipmrden Josipmrden marked this pull request as ready for review November 19, 2025 10:18
Copy link

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is the final PR Bugbot will review for you during this billing cycle

Your free Bugbot reviews will reset on December 12

Details

Your team is on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle for each member of your team.

To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.

Copy link
Contributor

@colinbarry colinbarry left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Two tiny tiny quibbles over the actual keywords that were added, but it's still clear from the context this means, so approved.

| `GRANT CREATE_DELETE ON EDGE_TYPES :KNOWS TO charlie` | `GRANT CREATE, DELETE ON EDGES OF TYPE :KNOWS TO charlie` |
| v3.6 | v3.7 | Description |
|-------------------------------------------------------|---------------------------------------------------------------------|---------------------------------------------------------|
| `GRANT READ ON LABELS :User, :Client TO alice` | `GRANT READ ON NODES CONTAINING LABELS :User, :Client TO alice` | Added `CONTAINING` keyword. |
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added NODES CONTAINING keywords.

|-------------------------------------------------------|---------------------------------------------------------------------|---------------------------------------------------------|
| `GRANT READ ON LABELS :User, :Client TO alice` | `GRANT READ ON NODES CONTAINING LABELS :User, :Client TO alice` | Added `CONTAINING` keyword. |
| `GRANT UPDATE ON LABELS :Document TO bob` | `GRANT READ, UPDATE ON NODES CONTAINING LABELS :Document TO bob` | Separated access rights with discrete permissions. |
| `GRANT CREATE_DELETE ON EDGE_TYPES :KNOWS TO charlie` | `GRANT CREATE, DELETE ON EDGES OF TYPE :KNOWS TO charlie` | Added `OF TYPE` for readability. |
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Replaced EDGE_TYPES with EDGES OF TYPE for readability

@matea16 matea16 merged commit 5cf99fd into memgraph-3-7 Nov 19, 2025
2 checks passed
matea16 added a commit that referenced this pull request Nov 19, 2025
* init

* Add the LOAD PARQUET release note

* Add most of the memgraph release notes up until today

* feat: Add docs for `frequencies_as_map` MAGE function (#1461)

Co-authored-by: Matea Pesic <80577904+matea16@users.noreply.github.com>

* feat: Add support for memgraph-lab chart secrets (#1462)

* feat: Add support for secrets to memgraph-lab chart

* fix: Typo

---------

Co-authored-by: Matea Pesic <80577904+matea16@users.noreply.github.com>

* feat: Add libStorageAccessMode to the standalone chart (#1463)

Co-authored-by: Matea Pesic <80577904+matea16@users.noreply.github.com>

* New fine-grained label based access (#1452)

* chore: Empty commit just to create PR

* doc: Update syntax for multi-tenancy setup

* docs: Changes for new fine-grained access permissions

* docs: Add example for combining rules

* docs: Add example for global permissions being overriden

* docs: Tidy LBAC docs

* docs: Add link to combining rules

* docs: Add migration to v3.7 LBAC guide

* docs: Apply some minor formatting

* docs: Fix minor typos

* docs: Add Enterprise to migration page

* Apply suggestions from code review

---------

Co-authored-by: Matea Pesic <80577904+matea16@users.noreply.github.com>

* feat: Add support for side containers to HA chart (#1464)

Co-authored-by: Matea Pesic <80577904+matea16@users.noreply.github.com>

* Update info regarding .old backups (#1465)

* old dir info

* Apply suggestions from code review

---------

Co-authored-by: Matea Pesic <80577904+matea16@users.noreply.github.com>

* Make memgraph release notes up to date

* Make MAGE release notes up to date

* Update debugging docs for heaptrack (#1466)

* Run memgraph docker in gdb (#1467)

Co-authored-by: Matea Pesic <80577904+matea16@users.noreply.github.com>

* Make release notes up-to-date

* Update the breaking changes

* feat: Support loading Parquet files from the local disk and from s3 (#1448)

* docs: Describe LOAD PARQUET clause usage

* docs: Add more details

* docs: Add details about LoadParquet clause

* docs: Remove TODOs

* docs: Add command-line args and runtime flags

* docs: Add Parquet example

* docs: Document cast to int64_t

* docs: Fix People->Person

* update structure

* docs: Add LOAD PARQUET clause, fix the link

* docs: Add page

* Update pages/querying/clauses/load-parquet.mdx

---------

Co-authored-by: matea16 <mateapesic@hotmail.com>
Co-authored-by: Matea Pesic <80577904+matea16@users.noreply.github.com>

* update release date

* SSO - Allow self signed identity server (#1471)

* sso docs

* Update pages/database-management/authentication-and-authorization/auth-system-integrations.mdx

---------

Co-authored-by: Matea Pesic <80577904+matea16@users.noreply.github.com>

* Mlbac migration upgrade (#1472)

* Add updated docs

* Update example

* Added example scenario

* Add disclaimer

* Apply suggestions from code review

* fix typo

---------

Co-authored-by: Matea Pesic <80577904+matea16@users.noreply.github.com>
Co-authored-by: matea16 <mateapesic@hotmail.com>

---------

Co-authored-by: Marko Budiselic <marko.budiselic@memgraph.com>
Co-authored-by: colinbarry <colin.barry@memgraph.io>
Co-authored-by: Andi Skrgat <andi8647@gmail.com>
Co-authored-by: andrejtonev <29177572+andrejtonev@users.noreply.github.com>
Co-authored-by: Dr Matt James <mattkjames7@gmail.com>
Co-authored-by: Ivan Milinović <44698587+imilinovic@users.noreply.github.com>
Co-authored-by: Josipmrden <josip.mrden@memgraph.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants