graphql-engine icon indicating copy to clipboard operation
graphql-engine copied to clipboard

Improving access control: granting specific permissions to functions in databases

Open mrpotato3 opened this issue 1 year ago • 0 comments

One of the reasons functions are created is to execute other queries before returning the results of a regular table query. The issue is that functions necessarily inherit the permissions of the table they return. In this case, auditing access to queries is impossible because a user could make a query to the function or directly to the table from which they want to obtain data, since they share permissions. Specific permissions should be able to be specified for functions, as is already done with tables and views.

mrpotato3 avatar Apr 22 '24 23:04 mrpotato3