From 74881b6b0635c839007bd4eca4f1c5d74a908009 Mon Sep 17 00:00:00 2001 From: OliviaYtterbrink Date: Mon, 29 Sep 2025 13:07:22 +0200 Subject: [PATCH 1/3] add new notification --- .../notifications/all-notifications.adoc | 63 +++++++++++++++++++ 1 file changed, 63 insertions(+) diff --git a/modules/ROOT/pages/notifications/all-notifications.adoc b/modules/ROOT/pages/notifications/all-notifications.adoc index fd39dcf9..ece0164d 100644 --- a/modules/ROOT/pages/notifications/all-notifications.adoc +++ b/modules/ROOT/pages/notifications/all-notifications.adoc @@ -3650,6 +3650,69 @@ m|WARNING |=== +[#_neo_clientnotification_security_shardedperformance] +=== This privilege will have a severe performance impact on sharded databases. + +.Notification details +[cols="<1s,<4"] +|=== +|Neo4j code +m|Neo.ClientNotification.Security.ShardedPrivilegePerformance +|Title +a|This privilege will have a severe performance impact on sharded databases. +|Description +a|This privilege will severely reduce the performance of queries run on sharded databases. We recommend to exclude sharded databases for now. +|Category +m|SECURITY +|GQLSTATUS code +m|01N73 +|Status description +|warn: sharded privilege performance. +This privilege will severely reduce the performance of queries run on sharded databases. We recommend to exclude sharded databases for now. +|Classification +m|SECURITY +|SeverityLevel +m|WARNING +|=== + +.Grant a property access rule privilege on all databases +[.tabbed-example] +===== +[.include-with-GQLSTATUS-code] +====== +Command:: ++ +[source, cypher] +---- +GRANT TRAVERSE ON GRAPH * TO ROLE exampleRole +---- + +Returned GQLSTATUS code:: +01N73 + +Returned status description:: +warn: sharded privilege performance. +This privilege will severely reduce the performance of queries run on sharded databases. We recommend to exclude sharded databases for now. + +Suggestions for improvement:: +Grant the privilege explicitly to databases instead of on all. + +====== +[.include-with-neo4j-code] +====== +Command:: ++ +[source, cypher] +---- +GRANT TRAVERSE ON GRAPH * TO ROLE exampleRole +---- + +Suggestions for improvement:: +Grant the privilege explicitly to databases instead of on all. +====== +===== + + [#_topology_notifications] == `TOPOLOGY` notifications From 32ef9fb32fbb967b43844985f9cdd91edf527e93 Mon Sep 17 00:00:00 2001 From: OliviaYtterbrink Date: Tue, 21 Oct 2025 13:57:26 +0200 Subject: [PATCH 2/3] Apply review comments --- .../pages/notifications/all-notifications.adoc | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/modules/ROOT/pages/notifications/all-notifications.adoc b/modules/ROOT/pages/notifications/all-notifications.adoc index ece0164d..2b98e20f 100644 --- a/modules/ROOT/pages/notifications/all-notifications.adoc +++ b/modules/ROOT/pages/notifications/all-notifications.adoc @@ -3651,7 +3651,7 @@ m|WARNING [#_neo_clientnotification_security_shardedperformance] -=== This privilege will have a severe performance impact on sharded databases. +=== Sharded privilege performance .Notification details [cols="<1s,<4"] @@ -3659,16 +3659,16 @@ m|WARNING |Neo4j code m|Neo.ClientNotification.Security.ShardedPrivilegePerformance |Title -a|This privilege will have a severe performance impact on sharded databases. +a|Privilege with a severe performance impact on sharded databases. |Description -a|This privilege will severely reduce the performance of queries run on sharded databases. We recommend to exclude sharded databases for now. +a|This specified privilege severely reduces the performance of queries run on sharded databases. Consider excluding sharded databases for now. |Category m|SECURITY |GQLSTATUS code m|01N73 |Status description |warn: sharded privilege performance. -This privilege will severely reduce the performance of queries run on sharded databases. We recommend to exclude sharded databases for now. +This specified privilege severely reduces the performance of queries run on sharded databases. Consider excluding sharded databases for now. |Classification m|SECURITY |SeverityLevel @@ -3692,10 +3692,10 @@ Returned GQLSTATUS code:: Returned status description:: warn: sharded privilege performance. -This privilege will severely reduce the performance of queries run on sharded databases. We recommend to exclude sharded databases for now. +This specified privilege severely reduces the performance of queries run on sharded databases. Consider excluding sharded databases for now. Suggestions for improvement:: -Grant the privilege explicitly to databases instead of on all. +Grant the privilege explicitly to databases instead of to all. ====== [.include-with-neo4j-code] @@ -3708,7 +3708,7 @@ GRANT TRAVERSE ON GRAPH * TO ROLE exampleRole ---- Suggestions for improvement:: -Grant the privilege explicitly to databases instead of on all. +Grant the privilege explicitly to databases instead of to all. ====== ===== From b588019e3d901925a816dcf03298765880c5b8f5 Mon Sep 17 00:00:00 2001 From: OliviaYtterbrink Date: Tue, 21 Oct 2025 14:19:16 +0200 Subject: [PATCH 3/3] Apply review comment --- modules/ROOT/pages/notifications/all-notifications.adoc | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/modules/ROOT/pages/notifications/all-notifications.adoc b/modules/ROOT/pages/notifications/all-notifications.adoc index 2b98e20f..e0d8c181 100644 --- a/modules/ROOT/pages/notifications/all-notifications.adoc +++ b/modules/ROOT/pages/notifications/all-notifications.adoc @@ -3661,14 +3661,14 @@ m|Neo.ClientNotification.Security.ShardedPrivilegePerformance |Title a|Privilege with a severe performance impact on sharded databases. |Description -a|This specified privilege severely reduces the performance of queries run on sharded databases. Consider excluding sharded databases for now. +a|The specified privilege severely reduces the performance of queries run on sharded databases. Consider excluding sharded databases for now. |Category m|SECURITY |GQLSTATUS code m|01N73 |Status description |warn: sharded privilege performance. -This specified privilege severely reduces the performance of queries run on sharded databases. Consider excluding sharded databases for now. +The specified privilege severely reduces the performance of queries run on sharded databases. Consider excluding sharded databases for now. |Classification m|SECURITY |SeverityLevel @@ -3692,7 +3692,7 @@ Returned GQLSTATUS code:: Returned status description:: warn: sharded privilege performance. -This specified privilege severely reduces the performance of queries run on sharded databases. Consider excluding sharded databases for now. +The specified privilege severely reduces the performance of queries run on sharded databases. Consider excluding sharded databases for now. Suggestions for improvement:: Grant the privilege explicitly to databases instead of to all.