Nice work
This is also a function that many community users want


------------------ Original ------------------
From: stalary <stal...@163.com&gt;
Date: Mon,Apr 25,2022 10:47 PM
To: dev@doris.apache.org <dev@doris.apache.org&gt;
Subject: Re: [Discuss][DSIP] Add Row Policy support





Dear All,


I’d like to add row policy support to Doris, column policy will also be 
supported in the future.


Sometimes we need permission control not only at the table level, but also at 
the row level, column level. At present, many users need to parse SQL and 
rewrite sql on out of doris or use thirdparty tools do it. which increases the 
use cost and causes performance loss.


The associated issue:https://github.com/apache/incubator-doris/issues/7540


There will be 2 stages:
1. Design a new set of Policy syntax
&nbsp;&nbsp;&nbsp; a) create policy
&nbsp;&nbsp;&nbsp; b) drop policy
&nbsp;&nbsp;&nbsp; c) show policy
&nbsp;&nbsp;&nbsp; d) parse expr
2. Match and rewrite sql
&nbsp;&nbsp;&nbsp; a) Matches policies through db + table + user
&nbsp;&nbsp;&nbsp; b) If multiple policies exist, merge the conditions based on 
the filter type, such as PERMISSIVE | RESTRICTIVE
&nbsp;&nbsp;&nbsp; c) Rewrite tableRef as InlineViewRef


And my account on wiki is: stalary, email is stal...@163.com


—
Best regards
Stalary

Reply via email to