hasura / hasura/graphql-engine

_in operator for custom check permissions for SQL Server

Open
#9,805 0 comments 0 reactions 0 assignees View on GitHub
k/enhancement t/native-dbs
Dominant language
TypeScript
Stars
32.1k
Forks
3k
PR merge metrics
PR metrics pending

Description

I am using v2.20.0 of Hasura Engine.

I am using it with an SQL Server database.

I am defining custom checks for row-level permissions on tables and I see no `_in` operator. Whereas the _in operator has long been supported by Hasura in the case of Postgres.

Example: I have a session variable `x-hasura-department-ids` which contains an array. I want to enable row-level checks on tables such that a user is able to access a row if the DepartmentID in that row equals to any one of the values in the array contained in `x-hasura-department-ids`. But I cannot see the `_in` operator.

Am I missing something? Or is the `_in` operator not supported in the case of SQL Server when defining? If that is the case, are there any near-term plans to support it?

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are named. Start by locating SQL Server custom row-level permission handling and comparing it with the existing Postgres `_in` behavior; done means supporting an array-valued session variable for matching a row field against any permitted value.

Written by the indexing model from the issue text.

Assessment

Tech stack
sql
Domain
authorization, databases
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.