dremio-professional-services / dremio-cloner

27 stars 20 forks source link

Writing permissions to DCS Project #38

Open dkapoor880 opened 1 year ago

dkapoor880 commented 1 year ago

Writing permissions to DCS Project

Using Cloner to Write to Target DCS Project, seems like acl_transformation_rbac.json file is mandatory for migaring permissions even if No Access or Permissions are being Changed.

In absence of a transformation file the during the PUT operation (write) we see an error: ERROR:2023-08-08 11:24:17,489:_process_acl: Source User de3711ce-5367-4cdf-9b37-f7f4e8d01ecd not found in the target Dremio Environment. ACL Entry cannot be processed as per ignore_missing_acl_user configuration. space:DeepakSpace

Including an ACL file as shown below fixed the issue. {"acl-transformation": [ { "source": {"user":"jonny@dremio.com"}, "target": {"user":"jonny@dremio.com"}} ] }

If i am not transforming any Permissions, why should we need to include a transformation file ?? The workaround is cumbersome, requiring Cloner/Dremio ADMIN to consolidate a list of all Users/Roles from Source and either build a acl_transformation file to include all these roles/users or to Generate SQL to grant Privileges from sys.organization.users or sys.users on Source Dremio Cluster.