Re: [I] [SIP-137] Can we limit a user to only read certain tables in the database connection? [superset]

["inctl (via GitHub)" <gi...@apache.org>]

inctl commented on issue #29171:
URL: https://github.com/apache/superset/issues/29171#issuecomment-2331051497

   Hello,
   
   I'm having the same problem using apache pinot in superset.
   Case study:
   A hundred clients with different rights access SuperSet. Superset rights management is used to limit access to the view.
   But as soon as the client looks at the network requests, they can retrieve the URL, account name and password from the database to reuse it and gain full access to the data.
   
   In this case, we have an Internet accessible solution, but I don't want my database to have the same access.
   
   Solution :
   Pass requests to the superset backend before reaching the databases + add a security layer based on superset roles.
   The databases will then not be accessible directly.
   
   As it is, I can't use superset for my project, even though the solution meets my needs perfectly.
   
   Thank you advance,


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org