roleout icon indicating copy to clipboard operation
roleout copied to clipboard

Allowing for future grants on tables and schemas

Open ian-r-rose opened this issue 2 years ago • 2 comments
trafficstars

This is an exciting project to see take shape!

One limitation that I ran into is that it does not seem to be possible to add future grants to roles for schemas and tables within a database. Instead, we have to manually add all schema names and assign permissions to them.

In my particular deployment, we expect schemas to be fairly dynamic and be added regularly by analysts. So we want to have most permissioning to be happening at the database level. Terraform exposes this ability via the on_future parameter.

Would it be possible to add on_future support to schemas in a database for this project?

ian-r-rose avatar Apr 27 '23 17:04 ian-r-rose

@ian-r-rose to clarify, it sounds like you're requesting to be able to manage access (Read/ReadWrite/Full) at the database level? If so that is indeed a feature that is on the roadmap, but let me know if you're asking for something different.

sfc-gh-ckite avatar May 03 '23 21:05 sfc-gh-ckite

@ian-r-rose to clarify, it sounds like you're requesting to be able to manage access (Read/ReadWrite/Full) at the database level? If so that is indeed a feature that is on the roadmap, but let me know if you're asking for something different.

Yes, that's exactly right -- I was hoping to be able to set up some roles and grants before the schemas exist, and before we really know what they will be.

ian-r-rose avatar May 03 '23 23:05 ian-r-rose