Uploaded image for project: 'Teiid Designer'
  1. Teiid Designer
  2. TEIIDDES-1548

Add GUI handling for permission conditions

    XMLWordPrintable

Details

    • Feature Request
    • Resolution: Done
    • Major
    • 8.2
    • None
    • None
    • None

    Description

      A common request is to implement row based security. Teiid has added the ability to define a permission condition for this purpose:

      <permission>
      <resource-name>...</resource-name>
      <condition>sql</condition>
      ...
      </permission>

      The sql should resolve against the resource specified, ideally designer would check that as well.

      See TEIID-2311 and the reference for how these conditions are applied.

      vdb.xml snippet
          <data-role name="base-role" any-authenticated="true">
              <description>Conditional access</description>
       
              <permission>
                  <resource-name>modelName.tblName</resource-name>
                  <condition constraint="false">column1=user()</condition>
              </permission>
       
          </data-role>
      

      Attachments

        1. add-allowed-language-dialog.png
          add-allowed-language-dialog.png
          16 kB
        2. add-column-mask-dialog.png
          add-column-mask-dialog.png
          20 kB
        3. add-row-based-security-dialog.png
          add-row-based-security-dialog.png
          22 kB
        4. allowed-languages-tab.png
          allowed-languages-tab.png
          9 kB
        5. column-mask-tab.png
          column-mask-tab.png
          14 kB
        6. row-based-security-tab.png
          row-based-security-tab.png
          13 kB

        Issue Links

          Activity

            People

              blafond Barry LaFond
              rhn-engineering-shawkins Steven Hawkins
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: