[teiid-issues] [JBoss JIRA] Resolved: (TEIID-1327) API request: Fine grained security

[Steven Hawkins (JIRA)]

     [ https://issues.jboss.org/browse/TEIID-1327?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Steven Hawkins resolved TEIID-1327.
-----------------------------------

    Resolution: Done


Added the org.teiid.dqp.internal.process.AuthorizationValidator interface.

An instance can be injected onto the RuntimeEngine bean via the teiid-jboss-beans.xml using the setAuthorizationValidator method.  If an instance is not provided the default DataRolesAuthorizationValidator will be used.

The main validate method gives access to the actual Command object as well as providing the QueryMetadataInterface and the DQPWorkContext.  All of these APIs are internal, so this is not yet a generally consumable feature.

> API request:  Fine grained security
> -----------------------------------
>
>                 Key: TEIID-1327
>                 URL: https://issues.jboss.org/browse/TEIID-1327
>             Project: Teiid
>          Issue Type: Feature Request
>          Components: Query Engine
>    Affects Versions: 7.1
>            Reporter: Mark Addleman
>            Assignee: Steven Hawkins
>             Fix For: 7.4
>
>
> I'd like an API to implement fine grained security checks.  The use case is to create a permission from each table+column requested, each stored procedure and other database objects and validate the user id and permission against an external security manager.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira