Permission Management: restrict editing ability for schemas

hortonworks / registry

Schema Registry

Apache License 2.0

15 stars 8 forks source link

Permission Management: restrict editing ability for schemas #266

Open cstrempfer opened 7 years ago

cstrempfer commented 7 years ago

In a multi-tenant environment we need to restrict access to the schemas. The first step would be to restrict the editing ability for individual schemas. Integration with Apache Ranger is desirable.

Further improvements:

Set permissions for schema groups. Probably #78 should be implemented first.
It would be good to also restrict read access, but I think that will be harder to implement and therefore should be handled as another issue.

michaelandrepearce commented 7 years ago

It would be good that authentication and authorisation could also support individual setups eg not reliant on just one solution eg support of more traditional LDAP, and even simple local auth also.

mtritschler commented 6 years ago

The docs say that this feature is still on the roadmap. Is there any update or ETA on this topic? We are currently evaluation this project as an option to build a schema-registry in a multi-tenant environment and see the missing access control as a potential blocker.