Azure / Azure/data-api-builder

Authorization Policy vNext -> Nested Table References

Open
#569 2 comments 3 reactions 0 assignees View on GitHub
auth enhancement
Dominant language
C#
Stars
1.5k
Forks
370
Avg merge
3d 22h
Merged PRs (30d)
9

Description

To further enhance the authorization policy capability, add the ability to map to nested tables/columns. For example:

- Database Policy: Entity (book) `"New Starch Press" eq @item().publisher_id.name`

Because the policy is applied to the book entity, the nested policy will search the Publishers table using publisher_id to acquire the record where name column is "New Starch Press"

Nesting will apply to the `@item` "Policy Expression System Object" described in the [request authorization RFC](https://github.com/Azure/project-hawaii/blob/main/rfcs/request-authorization.md#policy-expression-system-objects).

Contributor guide

Open the contributing guide

Research direction

Read the request authorization RFC section on Policy Expression System Objects first, then trace how the current authorization policy evaluates @item references. Define the nested table and column lookup behavior shown in the example, including how the related record is selected and how completion would be verified across the supported API paths.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
api, authorization, databases
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.