shohamyamin commented on issue #28377:
URL: https://github.com/apache/superset/issues/28377#issuecomment-2237457804
OPA(Open Policy Agent) can’t be used for what we need?
In OPA you can achieved both abac and rbac with the ability to add
information from outside sources(databases/APIs) for making a decision.
Trino was introduced opa plugin for making authorization over Trino
including column masking and row filtering.
from my experience with the Trino plugin it’s works great and you have good
control on the decision. We can implement a default rego policies for making
things simple
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
