Giters

getstrm / pace

Data policy IN, dynamic view OUT: PACE is the Policy As Code Engine. It helps you to programatically create and apply a data policy to a processing platform like Databricks, Snowflake or BigQuery (or plain 'ol Postgres, even!) with definitions imported from Collibra, Datahub, ODD and the like.

Home Page:https://pace.getstrm.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[PACE-12] Add optional extra Postgres grant that allows any other user with view access

trietsch opened this issue · comments

commented

The view that is created by PACE, isn't automatically accessible by any user that has access to the postgres cluster (this may apply to other processing platforms as well). Add an optional flag (api change) that allows for configuring arbitrary access to the view.

PACE-12

commented

This applies to all platforms. The question is to what extent this is the responsibility of PACE. I can imagine users prefer to do these grants from their provisioning layer. Read/select grants are often granted on parent schemas and can also be inherited from DB-level or similar.

commented

Agreed with your comments. I've ran into this while creating the standalone example, and therefore I created this issue to make sure we discuss it.