Azure / Azure/data-api-builder
Authorization Policy vNext -> Nested Table References
- Dominant language
- C#
- Stars
- 1.5k
- Forks
- 370
- Avg merge
- 3d 22h
- Merged PRs (30d)
- 9
Description
To further enhance the authorization policy capability, add the ability to map to nested tables/columns. For example:
- Database Policy: Entity (book) `"New Starch Press" eq @item().publisher_id.name`
Because the policy is applied to the book entity, the nested policy will search the Publishers table using publisher_id to acquire the record where name column is "New Starch Press"
Nesting will apply to the `@item` "Policy Expression System Object" described in the [request authorization RFC](https://github.com/Azure/project-hawaii/blob/main/rfcs/request-authorization.md#policy-expression-system-objects).
Contributor guide
Research direction
Read the request authorization RFC section on Policy Expression System Objects first, then trace how the current authorization policy evaluates @item references. Define the nested table and column lookup behavior shown in the example, including how the related record is selected and how completion would be verified across the supported API paths.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- api, authorization, databases
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100