[teiid-designer-issues] [JBoss JIRA] (TEIIDDES-1548) Add GUI handling for permission conditions
[
https://issues.jboss.org/browse/TEIIDDES-1548?page=com.atlassian.jira.plu...
]
Steven Hawkins commented on TEIIDDES-1548:
------------------------------------------
1) They are at the same level. For a column object both the condition and mask can be
specified. This is to accommodate the scenario where you want the masks to be defined on
multiple roles. Alternatively if you specify the masks with a single role, then the use
of condition and the mask order is not needed.
2) Check the reference. They apply to both. Condition/constraint is applicable for
virtual/source model table/view/procedures - although the condition is not yet enforced as
a constraint on virtual stuff. Condition/Mask/order apply to virtual/source columns.
Add GUI handling for permission conditions
------------------------------------------
Key: TEIIDDES-1548
URL: https://issues.jboss.org/browse/TEIIDDES-1548
Project: Teiid Designer
Issue Type: Feature Request
Reporter: Steven Hawkins
Assignee: Barry LaFond
Fix For: 8.2
Attachments: add-allowed-language-dialog.png, add-column-mask-dialog.png,
add-row-based-security-dialog.png, allowed-languages-tab.png, column-mask-tab.png,
row-based-security-tab.png
A common request is to implement row based security. Teiid has added the ability to
define a permission condition for this purpose:
<permission>
<resource-name>...</resource-name>
<condition>sql</condition>
...
</permission>
The sql should resolve against the resource specified, ideally designer would check that
as well.
See TEIID-2311 and the reference for how these conditions are applied.
{code:title=vdb.xml snippet}
<data-role name="base-role" any-authenticated="true">
<description>Conditional access</description>
<permission>
<resource-name>modelName.tblName</resource-name>
<condition
constraint="false">column1=user()</condition>
</permission>
</data-role>
{code}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira