apache / apache/gravitino

[Subtask] Relational chained authorization plugin

Open
#5,675 0 comments 0 reactions 1 assignee Claimed by @xunliu View on GitHub
subtask
Dominant language
Java
Stars
3.2k
Forks
935
Avg merge
1d 16h
Merged PRs (30d)
298

Description

### Describe the subtask

- Provide a framework to sync the privileges from SQL-based authorization plugin to path-based authorization plugin to guarantee the data protection and metadata protection
- One SQL-based plugin can work with multiple path-based plugins.
- Provide the privilege mapping between the gravitino privilege model and plugin privilege model
- Provide the interface to get the properties that the authorization plugin needs like location

Design doc: https://docs.google.com/document/d/1LmFLbJUqGPYGScipI_bm4fhLgOwfPQsV-RJwov_djiM/edit?tab=t.0#heading=h.h4cp3r9qmfo7

### Parent issue

#5774

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.