-
Notifications
You must be signed in to change notification settings - Fork 315
Open
Labels
enhancementNew feature or requestNew feature or request
Description
Is your feature request related to a problem? Please describe.
Currently Polaris catalog only support RBAC that a problem when the authorization logic fits to ABAC.
Describe the solution you'd like
My solution for that is making an OPA(Open Policy Agent) Plugin such that the catalog for every access control decision will retrieve from an opa server if this request should be allow or not.
That will also make the catalog more suitable for different use cases regarding access control
Describe alternatives you've considered
I’ve considered using the RBAC as ABAC but that will be complicate and not easy thing to do
Additional context
There is such plugin for Trino called Trino-opa plugin and the idea is come from there. It works really well and allow the user to control every feature of access control that the Trino has
hereisharish, almazrevolut, sungwy, lioneloh, alekhed and 5 more
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request