Option to automatically apply a row-level security to all tables containing X column in a database
- Dominant language
- Clojure
- Stars
- 49.3k
- Forks
- 6.8k
- Avg merge
- 1d 13h
- Merged PRs (30d)
- 653
Description
**What problem will this feature request solve?**
You need to set up row-level security policies per table. This is a lot to manage if new tables are appearing.
**Describe the solution you'd like.**
I'd like to have an option to automatically apply an rls policy to all tables of a db for a particular group. Ideally, the policy would be automatically applied if the relevant column is detected in the table. If the column is not detected, the permissions group with RLS would have no access. Better yet, I could abstract away my RLS policies and managed them from a central UI (something similar to alerts management).
**How does this feature request impact you?**
The lack of ability to automatically configure RLS policies means you need to constantly add permission settings for new tables. This seems particularly inconvenient if using transforms
**Additional information**
Requested by a potential customer using BigQuery DB
Contributor guide
Research direction
No files, tests, or entry points are named. Start by locating the existing per-table RLS configuration and BigQuery database support, then determine how policies could be managed centrally and applied when the requested column is present; done means new matching tables receive the policy and tables without the column provide no access.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- sql
- Domain
- databases, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100