Dear All,


I’d like to add row policy support to Doris, column policy will also be 
supported in the future.


Sometimes we need permission control not only at the table level, but also at 
the row level, column level. At present, many users need to parse SQL and 
rewrite sql on out of doris or use thirdparty tools do it. which increases the 
use cost and causes performance loss.


The associated issue:https://github.com/apache/incubator-doris/issues/7540


There will be 2 stages:
1. Design a new set of Policy syntax
    a) create policy
    b) drop policy
    c) show policy
    d) parse expr
2. Match and rewrite sql
    a) Matches policies through db + table + user
    b) If multiple policies exist, merge the conditions based on the filter 
type, such as PERMISSIVE | RESTRICTIVE
    c) Rewrite tableRef as InlineViewRef


And my account on wiki is: stalary, email is stal...@163.com


—
Best regards
Stalary

Reply via email to