Mercurial > gemma
view .hgchurn @ 1798:40cbfd268aa9
Row level security for import jobs
Add imports to database as the actual login user. sys_admin then
only needs to read and update (state) import job data.
The way the policies for import_logs and track_imports are implemented
has the side effect, that a sys_admin can do anything with all of
them. More fine-grainded policies and changes to Go code are needed, if
this is a concern.
author | Tom Gottfried <tom@intevation.de> |
---|---|
date | Mon, 14 Jan 2019 17:43:28 +0100 |
parents | 451c7d3fe6be |
children |
line wrap: on
line source
teichmann@intevation.de = sascha.teichmann@intevation.de bernhard.reiter@intevation.de = bernhard@intevation.de