-
Notifications
You must be signed in to change notification settings - Fork 5.5k
Open
Labels
Description
Currently, our procedure framework lacks access control. With the introduction of distributed procedure support, the need for access control to govern read and write operations on actual table data has become even more critical.
Expected Behavior or Use Case
The access control should cover both normal procedures and distributed procedures.
Presto Component, Service, or Connector
Analyzer
Possible Implementation
There should be two levels, the first is, we can have an access control check on the procedure itself, similar to table level access. Secondly, for distributed procedures which write data to a table, we should probably have INSERT + DELETE permissions required.
Context
See the comment here