Workflow access control

Texera / texera

Collaborative Machine-Learning-Centric Data Analytics Using Workflows

https://texera.github.io

Apache License 2.0

163 stars 72 forks source link

Workflow access control #1172

Closed Jiyang-Wu closed 3 years ago

Jiyang-Wu commented 3 years ago

Updating the database (https://github.com/Texera/texera/blob/master/core/scripts/sql/texera_ddl.sql) to differentiate different types of user priviliges in workflows.
Using jooq to generate interactions between servlets and database.
Updating workflow backend servlet.

Jiyang-Wu commented 3 years ago

Requirement update: there will possibly be an "admin user" design in the future. Keep that in mind while designing the backend.

Jiyang-Wu commented 3 years ago

Update:

A new table in database called WORKFLOW_USER_ACCESS is added to indicate a user's read/write privileges on a given workflow.
WorkflowAccessResource is implemented to include the feature of read/write/none privilege lookup.

Jiyang-Wu commented 3 years ago

Update: -WorkflowAccessResource now responds with json object and can successfully retrieve the level of access. -WorkflowResource updated to use a similar logic to the one used in WorkflowAccessResource to identify user access: a user can access a workflow even though he is not the owner identifieded in workflow_of_user table.

Jiyang-Wu commented 3 years ago

Update:

Finished 1st Version of front end feature: a button and a pop-up window for granting access to others
Backend endpoints also updated to modify and assign new accesses