-
Notifications
You must be signed in to change notification settings - Fork 3.3k
Description
Describe the bug
I tried to set up a policy to enforce that users can only view and execute the ingestion pipelines that they own (via group membership). I followed the official documentation https://docs.datahub.com/docs/ui-ingestion#option-2-resource-specific-policies , VIEW_INGESTION_SOURCE_PRIVILEGES_ENABLED is set in my helm chart as an ExtraEnv of the gms.
The documentation mentions 4 privileges available for ingestion sources, View, Edit, Delete and Execute. But the View privilege is missing in the UI. I assume because of that for a non-admin user the entire "Data Sources" section is missing in the UI, even though the user owns an ingestion pipeline.
Using option 1 of the guide works, but that does not provide resource based access control to ingestion pipelines.
To Reproduce
Steps to reproduce the behavior:
- Set
VIEW_INGESTION_SOURCE_PRIVILEGES_ENABLED - As an admin user go to Settings > Permissions > Policies > Create new policy
- Select Ingestion Source as resource type
- Click on the privileges field, you'll only see Edit, Delete and Execute
Expected behavior
The View privilege should be available for the Ingestion Source resource, so Users can view the ingestion sources that they own.
Deployment
Self hosted DataHub 1.3.0
Helm Chart 0.7.3
