[teiid-issues] [JBoss JIRA] (TEIID-2327) Add column masking

Thu May 2 13:23:53 EDT 2013

    [ https://issues.jboss.org/browse/TEIID-2327?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12771719#comment-12771719 ] 

Steven Hawkins commented on TEIID-2327:
---------------------------------------

While associating masks/filters on a per-role basis is conceptually good, the implementation may need tweaked.  For instance the current approach to row based security is applied based upon the assigned roles each time a query is planned.  In practice for any role other than an any-authenticated, this leads us to mark the plan as user specific.  This  is fine for result set caching, but will create a lot of prepared plans.  One possibility would be to aggregate filters across all roles with appropriate conditionals on role assignment so that a single condition is applicable to all scenarios - the drawback being that this could lead to suboptimal plans if any one of the role conditions cannot be pushed - as they will be connected via or.  Another option would be to add applicable roles to the determinism tracking.

> Add column masking
> ------------------
>
>                 Key: TEIID-2327
>                 URL: https://issues.jboss.org/browse/TEIID-2327
>             Project: Teiid
>          Issue Type: Sub-task
>          Components: Query Engine
>            Reporter: Steven Hawkins
>            Assignee: Steven Hawkins
>             Fix For: 8.4
>
>
> Support for column masking should be added to data roles.  A typical approach would be to only affect the final projected values from user queries and have only one mask applicable at a time.
> A possibly related ability would be to hide columns (much like hidden tables) to our metadata.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira