You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@dolphinscheduler.apache.org by GitBox <gi...@apache.org> on 2021/07/27 12:58:44 UTC
[GitHub] [dolphinscheduler] beeflyme opened a new issue #5897: [Improvement][DataSource] all user have all datasource permission,lead data security issues
beeflyme opened a new issue #5897:
URL: https://github.com/apache/dolphinscheduler/issues/5897
*For better global communication, please give priority to using English description, thx! *
*Please review https://dolphinscheduler.apache.org/en-us/community/development/issue.html when describe an issue.*
**Describe the question**
all user have all datasource permission,lead data security issues.
**What are the current deficiencies and the benefits of improvement**
to slove the data safety problem.
**Which version of DolphinScheduler:**
-[1.3.6-preview]
**Describe alternatives you've considered**
1. for example there are three users userA,userBăuserC using a DolphinScheduler plantform.
we can separate them with three different projects.
2. but one user(such as A) can use all datasource include other person/project(B\C) using.
3. if A in fact don't have userB's datasource access perm, but he still can using datasource userB created.
then, A can download all tables by datax/sqoop using datasource B created.
that lead data security issues.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] github-actions[bot] commented on issue #5897: [Improvement][DataSource] all user have all datasource permission,lead data security issues
Posted by GitBox <gi...@apache.org>.
github-actions[bot] commented on issue #5897:
URL: https://github.com/apache/dolphinscheduler/issues/5897#issuecomment-1011567768
This issue has been closed because it has not received response for too long time. You could reopen it if you encountered similar problems in the future.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] github-actions[bot] commented on issue #5897: [Improvement][DataSource] all user have all datasource permission,lead data security issues
Posted by GitBox <gi...@apache.org>.
github-actions[bot] commented on issue #5897:
URL: https://github.com/apache/dolphinscheduler/issues/5897#issuecomment-1005270327
This issue has been automatically marked as stale because it has not had recent activity for 30 days. It will be closed in next 7 days if no further activity occurs.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] github-actions[bot] closed issue #5897: [Improvement][DataSource] all user have all datasource permission,lead data security issues
Posted by GitBox <gi...@apache.org>.
github-actions[bot] closed issue #5897:
URL: https://github.com/apache/dolphinscheduler/issues/5897
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] CalvinKirs commented on issue #5897: [Improvement][DataSource] all user have all datasource permission,lead data security issues
Posted by GitBox <gi...@apache.org>.
CalvinKirs commented on issue #5897:
URL: https://github.com/apache/dolphinscheduler/issues/5897#issuecomment-887617595
Great suggestion, can you provide a specific design and complete it?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] geosmart edited a comment on issue #5897: [Improvement][DataSource] all user have all datasource permission,lead data security issues
Posted by GitBox <gi...@apache.org>.
geosmart edited a comment on issue #5897:
URL: https://github.com/apache/dolphinscheduler/issues/5897#issuecomment-887995377
datasource permission is `coarse-grained` .
for `fine-grained` permission we can use dataset which is created by datasource( like sql view) .
control from db level to table row level
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] geosmart commented on issue #5897: [Improvement][DataSource] all user have all datasource permission,lead data security issues
Posted by GitBox <gi...@apache.org>.
geosmart commented on issue #5897:
URL: https://github.com/apache/dolphinscheduler/issues/5897#issuecomment-887995377
datasource permission is `coarse-grained`,
for `fine-grained` permission we can use dataset which is created by datasource( like sql view)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] ruanwenjun commented on issue #5897: [Improvement][DataSource] all user have all datasource permission,lead data security issues
Posted by GitBox <gi...@apache.org>.
ruanwenjun commented on issue #5897:
URL: https://github.com/apache/dolphinscheduler/issues/5897#issuecomment-887502402
Yes, the permission and security is very important, a common permission model is user to projects and project to resources.
In this model, if a user have the access to one project, then he has the access to the resources belong to the project.
If you have any idea, you can start a discussion, this might be interesting.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org