Azure / Azure/data-api-builder

Authorization Policy vNext -> Nested Table References

Open
#569 2 comments 3 reactions 0 assignees View on GitHub
auth enhancement
Dominant language
C#
Stars
1.5k
Forks
370
Avg merge
3d 17h
Merged PRs (30d)
8

Description

To further enhance the authorization policy capability, add the ability to map to nested tables/columns. For example:

- Database Policy: Entity (book) `"New Starch Press" eq @item().publisher_id.name`

Because the policy is applied to the book entity, the nested policy will search the Publishers table using publisher_id to acquire the record where name column is "New Starch Press"

Nesting will apply to the `@item` "Policy Expression System Object" described in the [request authorization RFC](https://github.com/Azure/project-hawaii/blob/main/rfcs/request-authorization.md#policy-expression-system-objects).

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.