deephaven / deephaven-core

Deephaven Community Core
Other
257 stars 80 forks source link

Declarative server-side table execution logic that preserves authorization logic #6307

Open devinrsmith opened 3 weeks ago

devinrsmith commented 3 weeks ago

As expressed in the FlightSQL review comment, we should ideally be able to execute server side Table logic that respects the intentions as exposed via io.deephaven.auth.codegen.impl.TableServiceContextualAuthWiring. This is currently a layer that is heavily targeted towards the gRPC / protobuf, so it's not immediately obvious how we can take advantage of this server-side.

One proposal is to create a new permissions interface against TableSpec (or migrate the existing) and update the various io.deephaven.server.table.ops.GrpcTableOperation to plumb through the TableSpec execution logic.