bloomberg / bloomberg/comdb2

Better access control in comdb2

Open
#744 3 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
C
Stars
1.5k
Forks
243
Avg merge
2d 2h
Merged PRs (30d)
37

Description

The access control should be enhanced. I am adding a few ideas here:
1) we need a user abstraction, that will aggregate user ids (established through SSL certificates or username&password, for example), and credentials
2) credentials are tuples `(userid, tablename, accesstype)`; access type could be read, write, and so on. Table name could be a local table, for example `"t1"`, or a remote table `"dbname1.t2"`. We could accept wildcards to make things simple, for example `"*"` means everything, `"dbname2.*"` means every table in `dbname2`. and so on
3) For simplicity, we could handle access rights at the ingress point (the db that the client connects to); we could enforce both local and remote access here. This eliminates the need to manage distributed keys accross multiple clusters.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.