data-api-builder
data-api-builder copied to clipboard
Authorization Policy vNext -> Request Policies
M1/1.5 met the requirement of adding support for Database Policies. This next iteration is to apply policies at the request level: policy resolution does not result in database query predicates, and instead checks the policy against claims present in the user's token and makes a allow/deny decision.
Per RFC request policy: defines a rule that will be checked before sending any request to the database
Requires progress on #936
Per https://github.com/Azure/data-api-builder/issues/1099 moving to June2023 release.