Skip to content

Add access control for Procedure architecture #26680

@hantangwangd

Description

@hantangwangd

Currently, our procedure framework lacks access control. With the introduction of distributed procedure support, the need for access control to govern read and write operations on actual table data has become even more critical.

Expected Behavior or Use Case

The access control should cover both normal procedures and distributed procedures.

Presto Component, Service, or Connector

Analyzer

Possible Implementation

There should be two levels, the first is, we can have an access control check on the procedure itself, similar to table level access. Secondly, for distributed procedures which write data to a table, we should probably have INSERT + DELETE permissions required.

Context

See the comment here

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions