Adapt RLS-CLS VS to DB version 8. #105
Conversation
| @@ -3,7 +3,7 @@ | |||
|
|
|||
| ## Background: | |||
|
|
|||
| **The official project to implement Row Level Security via Virtual Schemas is described here: <https://github.com/exasol/row-level-security-lua>. We recommend to use the Github Project to implement your own Row Level Security. The below article is only an example of a custom connector and is not officially supported** | |||
There was a problem hiding this comment.
This article describes how you could implement a custom Virtual Schema adapter to implement Column Level Security (CLS) in addition to Row Level Security (RLS). RLS with EXASOL can be used to restrict access to rows (datasets) in tables to set of roles, tenants (owners), group of users, combination of tenant and role, and combination of tenant and group. CLS allows customers to control access to table columns.
The official project to implement Row Level Security via Virtual Schemas is described here: https://github.com/exasol/row-level-security-lua. We recommend to use the Github Project to implement your own Row Level Security. The below article is only an example of a custom connector and is not officially supported.
This article consists of 4 parts:
There was a problem hiding this comment.
I changed the paragraph accordingly and also fixed word case below.
| @@ -25,13 +25,13 @@ At the same time, there are also bank employees that are not working for a parti | |||
| To prepare for this demo, you will need to download these 2 files: | |||
|
|
|||
| * RLS-CLS-data_schema_customer.csv | |||
| * RLS-CLS-Demo_V2.sql | |||
| * RLS-CLS-Demo_PYTHON3.sql | |||
There was a problem hiding this comment.
- RLS-CLS-data_schema_customer.csv
- RLS-CLS-Demo_V2.sql - the vanilla version of the adapter
There was a problem hiding this comment.
Could you pls explain in more detail?
There was a problem hiding this comment.
Added hyperlink and changed the second to "PYTHON3" version.
| @@ -119,7 +119,7 @@ INSERT INTO ADAPTER_SCHEMA.RESTRICTIONS_COLUMNS VALUES | |||
| ``` | |||
| Now, the E-mail column is also hidden for all users with the CLS_DETAILS_SECURED role. | |||
|
|
|||
| With this framework, you can specify as many restrictions on as many tables as you want. You can even expand the adapter to script to fit your exact use case. | |||
| With this framework, you can specify as many restrictions on as many tables as you want. You can even expand the adapter to script to fit your exact use case. | |||
|
|
|||
| ## Additional References: | |||
|
|
|||
There was a problem hiding this comment.
Do you want to publish _V2?
There was a problem hiding this comment.
Yes, to not break potential existing links.
Nevertheless, I've added now a comment inside the "RLS-CLS-Demo_V2.sql" file and also link to it from article as RLS-CLS-Demo_V2 _OLD.sql now.
allipatev
force-pushed
the
vs-rls-cls-v8
branch
2 times, most recently
from
5b48bde to
20fcb51
Compare
| @@ -119,7 +119,7 @@ INSERT INTO ADAPTER_SCHEMA.RESTRICTIONS_COLUMNS VALUES | |||
| ``` | |||
| Now, the E-mail column is also hidden for all users with the CLS_DETAILS_SECURED role. | |||
|
|
|||
| With this framework, you can specify as many restrictions on as many tables as you want. You can even expand the adapter to script to fit your exact use case. | |||
| With this framework, you can specify as many restrictions on as many tables as you want. You can even expand the adapter to script to fit your exact use case. | |||
There was a problem hiding this comment.
Are there performance restrictions?
There was a problem hiding this comment.
I did not analyze it in detail and prefer to think that this VS isn't a good fit for high workload scenarios (a note in bold in the beginning).
allipatev
force-pushed
the
vs-rls-cls-v8
branch
from
20fcb51 to
b2d3a1c
Compare
No description provided.