Add support for Row Level Security (RLS)
Nobody has claimed this yet.
- Dominant language
- C++
- Stars
- 2.9k
- Forks
- 342
- Avg merge
- 2d 14h
- Merged PRs (30d)
- 53
Description
Description
Row Level Security (RLS) is a database access control mechanism that enables data access filtering at the row granularity. Unlike traditional table-level/column-level GRANT permissions (which control whether a user can access an entire table), RLS allows administrators to define policies so that the same table presents different subsets of data to different users. For example:
- User A executing
SELECT * FROM orderswould only see their own orders. - User B (with an operations role) executing the same SQL would see all orders within their assigned region.
This feature request is to implement RLS support in OceanBase seekdb.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or entry points are named. Start by tracing how seekdb currently handles table- and column-level GRANT permissions. Define how policies are created and enforced, including the per-user and regional access examples, then add coverage showing that different roles see the intended rows.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp, sql
- Domain
- authorization, databases, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100