metabase / metabase/metabase

Option to automatically apply a row-level security to all tables containing X column in a database

Open
#76,808 0 comments 0 reactions 0 assignees View on GitHub
.Auto triaged .Team/UXWest Administration/Data Sandboxes Type:New Feature
Dominant language
Clojure
Stars
49.3k
Forks
6.8k
Avg merge
1d 13h
Merged PRs (30d)
653

Description

**What problem will this feature request solve?**
You need to set up row-level security policies per table. This is a lot to manage if new tables are appearing.

**Describe the solution you'd like.**
I'd like to have an option to automatically apply an rls policy to all tables of a db for a particular group. Ideally, the policy would be automatically applied if the relevant column is detected in the table. If the column is not detected, the permissions group with RLS would have no access. Better yet, I could abstract away my RLS policies and managed them from a central UI (something similar to alerts management).

**How does this feature request impact you?**
The lack of ability to automatically configure RLS policies means you need to constantly add permission settings for new tables. This seems particularly inconvenient if using transforms

**Additional information**
Requested by a potential customer using BigQuery DB

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are named. Start by locating the existing per-table RLS configuration and BigQuery database support, then determine how policies could be managed centrally and applied when the requested column is present; done means new matching tables receive the policy and tables without the column provide no access.

Written by the indexing model from the issue text.

Assessment

Tech stack
sql
Domain
databases, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.