Skip to content

Authorization Policy vNext -> Request Policies #570

@seantleonard

Description

@seantleonard

M1/1.5 met the requirement of adding support for Database Policies. This next iteration is to apply policies at the request level: policy resolution does not result in database query predicates, and instead checks the policy against claims present in the user's token and makes a allow/deny decision.

Per RFC request policy: defines a rule that will be checked before sending any request to the database

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    Status

    Triage

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions