[JBoss JIRA] (TEIID-2311) Add simple row based security to data roles
by Steven Hawkins (JIRA)
Steven Hawkins created TEIID-2311:
-------------------------------------
Summary: Add simple row based security to data roles
Key: TEIID-2311
URL: https://issues.jboss.org/browse/TEIID-2311
Project: Teiid
Issue Type: Feature Request
Components: Query Engine
Affects Versions: 8.2
Reporter: Steven Hawkins
Assignee: Steven Hawkins
A common request is to implement row based security. The common workaround of modifying transformations is generally not a good solution.
We should look at adding support for simple table filters and column masks.
To be effective, filtering permissions however would have to act differently than normal data roles. They would need to be applied all the time - and not just against the end user queries.
For example, for tables:
<permission>
<resource-name>SCHEMA.TABLE</resource-name>
<filter>COLUMNA=2</filter>
</permission>
Meaning allow the CRUD of the given row only if COLUMNA has the value of 2. Any valid predicate against just the referenced table would be allowed as a filter. Each such permission would be applied as an additional predicate any time the table is referenced (in views, inserts, updates, deletes, etc.).
Allows would not be specified here as we want the filter to always specify inclusion. Any applicable permissions in additional roles would be applied disjunctively - filter OR filter.
We could possibly support column masks via case expressions, such as:
<permission>
<resource-name>SCHEMA.TABLE.COLUMN</resource-name>
<mask>CASE WHEN ...</mask>
</permission>
However this is slightly more complicated. Presumably the mask would only apply to projection and makes more sense to be applied at the final output/user query (more like a data role).
If we work the issue to specify the object type of a permission, then the name could alternatively refer to datatype or even an extension property to make the masking a little easier.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years
[JBoss JIRA] (TEIID-2312) Allow resource adaptor to support "security-domain"
by Ramesh Reddy (JIRA)
Ramesh Reddy created TEIID-2312:
-----------------------------------
Summary: Allow resource adaptor to support "security-domain"
Key: TEIID-2312
URL: https://issues.jboss.org/browse/TEIID-2312
Project: Teiid
Issue Type: Enhancement
Components: Server
Affects Versions: 8.1
Reporter: Ramesh Reddy
Assignee: Steven Hawkins
Currently
* LDAP
* Salesforce
* Google
connectors require user-id/password for making connections with underlying systems, but I do not think they support defining the "security-domain" so that the logged-in user's credentials can be passed through to sources.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years
[JBoss JIRA] (TEIID-2314) Unable to read class Name of resource adapter
by Kamran Muhammad (JIRA)
Kamran Muhammad created TEIID-2314:
--------------------------------------
Summary: Unable to read class Name of resource adapter
Key: TEIID-2314
URL: https://issues.jboss.org/browse/TEIID-2314
Project: Teiid
Issue Type: Bug
Components: AdminApi
Affects Versions: 8.1
Reporter: Kamran Muhammad
Assignee: Steven Hawkins
We can read the coinfig properties of any resource adapter (*.rar). However we can not read the ManagedConnectionFactory class name and some other information in resource adapter rars.
Following link explains how to read properties, however mentions that need some modification in teiid subsystem to show class name also.
https://community.jboss.org/message/778401
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years
[JBoss JIRA] (TEIID-2182) Mechanism to hook up event listener into Teiid runtime
by Anil Allewar (JIRA)
Anil Allewar created TEIID-2182:
-----------------------------------
Summary: Mechanism to hook up event listener into Teiid runtime
Key: TEIID-2182
URL: https://issues.jboss.org/browse/TEIID-2182
Project: Teiid
Issue Type: Feature Request
Components: AdminApi, Server
Affects Versions: 8.1
Environment: Windows 7 64 bit
Reporter: Anil Allewar
Assignee: Steven Hawkins
It would be to useful allow the installation of custom listeners since we don't have a global vdb table that could have customizable triggers. This could cover for example custom strategies for external materialization initialization.
This would also help in where an application wants to listen to when a VDB was added, made active, destroyed so that it can handle those events as required by the application.
Please see the thread below for the context & details
https://community.jboss.org/message/756060
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
12 years