Nice work
This is also a function that many community users want


------------------ Original ------------------
From: stalary <[email protected]&gt;
Date: Mon,Apr 25,2022 10:47 PM
To: [email protected] <[email protected]&gt;
Subject: Re: [Discuss][DSIP] Add Row Policy support





Dear All,


I’d like to add row policy support to Doris, column policy will also be 
supported in the future.


Sometimes we need permission control not only at the table level, but also at 
the row level, column level. At present, many users need to parse SQL and 
rewrite sql on out of doris or use thirdparty tools do it. which increases the 
use cost and causes performance loss.


The associated issue:https://github.com/apache/incubator-doris/issues/7540


There will be 2 stages:
1. Design a new set of Policy syntax
&nbsp;&nbsp;&nbsp; a) create policy
&nbsp;&nbsp;&nbsp; b) drop policy
&nbsp;&nbsp;&nbsp; c) show policy
&nbsp;&nbsp;&nbsp; d) parse expr
2. Match and rewrite sql
&nbsp;&nbsp;&nbsp; a) Matches policies through db + table + user
&nbsp;&nbsp;&nbsp; b) If multiple policies exist, merge the conditions based on 
the filter type, such as PERMISSIVE | RESTRICTIVE
&nbsp;&nbsp;&nbsp; c) Rewrite tableRef as InlineViewRef


And my account on wiki is: stalary, email is [email protected]


—
Best regards
Stalary

Reply via email to