apache / datafusion-ballista

Apache DataFusion Ballista Distributed Query Engine
https://datafusion.apache.org/ballista
Apache License 2.0
1.4k stars 182 forks source link

[feature] Access control to restrict the access to the data #835

Open thinkORo opened 1 year ago

thinkORo commented 1 year ago

Is your feature request related to a problem or challenge? Please describe what you are trying to do. I'd like to restrict the access to the data via a x-based-access-control pattern (x could be a Role or an Attribute). For that we need two different things:

  1. authentication
  2. authorization

Describe the solution you'd like for 1.: at least a username and password must be defined (for instance via a user.list file) or, in the second step, a specific IAM provider like keycloak for 2.: a way to grant or revoke permissions on different objects

This feature could be implemented step by step with a simple authentication which would increase the current (non-exsisting?) security solution in Arrow Ballista.