mistercrunch commented on issue #29171:
URL: https://github.com/apache/superset/issues/29171#issuecomment-2542169166

   Yeah, unclear if a SQL IDE should even attempt to do this, though I can see 
the use case. Like i have a set of say 3 roles:
   - data engineer - all access
   - data scientist - subset of schemas
   - data consumers - another subset of schemas
   
   These people all know how to write SQL and need to write SQL as part of 
their job, and I want for that schema-access enforcement carries through 
Superset.
   
   Now today what you'd do is probably create 3 different database connections, 
each with a different service account with schema-level restrictions, and give 
access to each role independently. It does kind of get messy where you may have 
to use different connections for explore if people want to share/collab on 
certain datasets. While the physical dataset may be the same, Superset would 
see them as different datasets as they use different connections. For that, 
you'd probably need a 4th database connection that like "MAIN CONNECTION - with 
data access policy" on top of the "DATA SCIENTIST DATABASE CONNECTOIN FOR SQL 
LAB". It gets kind of messy/confusing quick, but in theory would work.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to