apache / apache/polaris

Opa Auth: Skip Polaris native principal and RBAC resolution in `OpaPolarisAuthorizer`

Open
#5,476 3 comments 1 reaction 1 assignee Claimed by @gracechen09 View on GitHub
enhancement
Dominant language
Java
Stars
2.1k
Forks
522
Avg merge
1d 22h
Merged PRs (30d)
137

Description

### Is your feature request related to a problem? Please describe.

As a result of https://github.com/apache/polaris/issues/3779 system administrators can now deploy Polaris with custom `PolarisAuthorizer` implementations that skip RBAC and principal resolution in the request flow.

This issue tracks the work in making breaking changes to skip principal and RBAC resolution in `OpaPolarisAuthorizer` in auth/opa extension.

### Describe the solution you'd like

Using `OpaPolarisAuthorizer` no longer requires Polaris native principal and RBAC, and instead passes the principal attributes to OPA as the policy authority.

### Describe alternatives you've considered

_No response_

### Additional context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.