Skip to content

Preview/extended version of opa-authorizer #2

Closed

Description

@adwk67

This version builds on the experimental release (version 0.1.0) and will address (without necessarily implementing everything) the following:

  • Permission granularity
    • Action granularity: do we want to distinguish between e.g. Admin and Create, and between different types of writes (write vs. delete) as is done upstream?
    • look at granting permissions on the level of cell families, not just tables
    • permissions to be distinct between KeyValue and ColumnFamily
    • check permissions on each mutation
  • Permission coverage
    • check ADMIN on each namespace
    • read permissions required for checkAnd* methods to prevent probing
  • Logging
    • review all logging statements to reduce noise
  • Other
    • investigate ways of tracking changes made to upstream interfaces
    • ensure consistency between empty implementation of interface methods (just for logging) and fallback to default impls
    • ensure that all functionality is covered by integration tests

Activity

  1. changed the title [-]Preview version of opa-authorizer[/-] [+]Preview/extended version of opa-authorizer[/+] on Dec 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions