PipedreamHQ / PipedreamHQ/pipedream
[FEATURE] Add project-level Data Stores for improved governance and security
- Dominant language
- JavaScript
- Stars
- 11.7k
- Forks
- 5.8k
- Avg merge
- 3d 10h
- Merged PRs (30d)
- 102
Description
Is your feature request related to a problem? Please describe.
I’m often frustrated that Data Stores in Pipedream are global across all projects, without the possibility of restricting access. This means any member with access to the workspace can potentially read or write sensitive information, which limits governance and data security.
Describe the solution you'd like
I’d like the ability to have project-specific Data Stores, similar to the way the Variables section already works. This would allow each project to have its own Data Store with restricted access to its members only, improving both governance and security.
Do you have a workaround?
The current workaround is to use encryption for sensitive values. While this adds a layer of protection, it is not as convenient or robust as having project-level Data Stores with proper access control built in.
Comparable features in other tools?
Other platforms allow for project-level or environment-level storage with strict access controls. For example, environment variables in Pipedream itself can be already restricted to a project, which makes them safer to use. Having Data Stores follow the same model would align with best practices.
Additional context
Project-specific Data Stores would not only improve security and governance but also help teams organize and manage data more effectively, avoiding accidental cross-project access or data leaks.
Contributor guide
Assessment
This issue has not been assessed yet.