opentdf / platform

Persistent data centric security that extends owner control wherever data travels
BSD 3-Clause Clear License
19 stars 11 forks source link

Policy API: should be able to update an existing attribute value's members #476

Closed jakedoublev closed 4 months ago

jakedoublev commented 8 months ago

Background

https://github.com/opentdf/platform/issues/105 helped add functionality to create Attribute Values with Members. However, there is a need to update Attribute Values that already exist. From there, a Client can rely on the update API to add, remove, or replace members of a value.

Acceptance Criteria

One of the following two options is employed:

  1. UpdateAttributeValues RPC and data layer allow complete replacement of members by a Client
    • update of value members is considered a full replacement of whatever member values previously existed
    • the client is responsible for deciphering what the final replaced members should be
  2. UpdateAttributeValues RPC and data layer rely on a behavior enum construct similar to metadata to allow extending or full replacement of value members

In either implementation, the following:

jakedoublev commented 5 months ago

This should not be done while Product clarifies the story and concepts around Members/GroupBy.

jakedoublev commented 4 months ago

Won't do.

jakedoublev commented 4 months ago

https://github.com/opentdf/platform/issues/984