hasura / hasura/graphql-engine

A way for Hasura Console to only allow viewing and changing of Postgres data, but not changes in schema or meta data like permissions and relationships

Open
#7,667 1 comment 7 reactions 1 assignee Assigned to @ManushiKhanna View on GitHub
c/console estimate/L k/enhancement
Dominant language
TypeScript
Stars
32.1k
Forks
3k
PR merge metrics
PR metrics pending

Description

### Is your proposal related to a problem?

We are currently using Hasura as a GraphQL engine for one of our solutions, which we need read and write access to the Postgres data, as we are still in a POC test phase.
For the production system, all migration and metadata is only changed via a CI/CD pipeline.
As our support staff need access to the Postgres data, the easiest way would be to simply give them access to the Hasura Console.
The problem is that if they accidentally change a database schema, it could possibly crash the system.

### Describe the solution you'd like

The best and easiest way would be to block the modification of metadata and schemas etc. for the Hasura Console via an ENV variable.
I am aware that the console is not intended for this purpose, but to be honest, the console offers the best and most intuitive way to view the database without having to use complex database tools that we have to teach our staff again.

### Describe alternatives you've considered

Do you have any ideas on how this could be implemented now? Does the possibility already exist somehow? The simpler the better ;)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.