Hello Vikas,

Sorry missed replying this mail.

>From the requirement put up, i see query needs to be rewritten with where
clause appended. For plugging in any new rewriter, there is open issue
LENS-24 (https://issues.apache.org/jira/browse/LENS-24) and the changes put
up at https://reviews.apache.org/r/29110/. The changes need a rebase with
master. One the pluggable rewriter is available, plugging in AuthRewriter
should be simple.

Thanks
Amareshwari


On Thu, Apr 23, 2015 at 11:16 AM, Vikas Singh (Tech - VS) <
[email protected]> wrote:

> Problem Statement: Implementing Authorisation filter in lens.
>
>     The way we do Row level authorisation is -
> For row level security, we have auth_db which stores map of significant
> columns(In which we are interested to do row level security) and allowed
> values per user. During run time we get all the Facts associated in query,
> get their column set and do a intersection with set returned from auth_db.
> Resulting set is appended as "IN Clause" or column!=value to the query
> accordingly.
>
>     My guess is the best place to do it will be driver ReWriter level as it
> will handle CubeQl and bypassed HQL seamlessly. I was wondering if there is
> any better place to do this, i.e. any hooks available.
>
> Regards
> Vikas Singh
>

Reply via email to