hasura / hasura/graphql-engine
_in operator for custom check permissions for SQL Server
- Dominant language
- TypeScript
- Stars
- 32.1k
- Forks
- 3k
- PR merge metrics
- PR metrics pending
Description
I am using v2.20.0 of Hasura Engine.
I am using it with an SQL Server database.
I am defining custom checks for row-level permissions on tables and I see no `_in` operator. Whereas the _in operator has long been supported by Hasura in the case of Postgres.
Example: I have a session variable `x-hasura-department-ids` which contains an array. I want to enable row-level checks on tables such that a user is able to access a row if the DepartmentID in that row equals to any one of the values in the array contained in `x-hasura-department-ids`. But I cannot see the `_in` operator.
Am I missing something? Or is the `_in` operator not supported in the case of SQL Server when defining? If that is the case, are there any near-term plans to support it?
Contributor guide
Research direction
No files, tests, or entry points are named. Start by locating SQL Server custom row-level permission handling and comparing it with the existing Postgres `_in` behavior; done means supporting an array-valued session variable for matching a row field against any permitted value.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- sql
- Domain
- authorization, databases
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100