Skip to content

Ingestion Source policy is missing View privilege #15505

@zPhenomm

Description

@zPhenomm

Describe the bug
I tried to set up a policy to enforce that users can only view and execute the ingestion pipelines that they own (via group membership). I followed the official documentation https://docs.datahub.com/docs/ui-ingestion#option-2-resource-specific-policies , VIEW_INGESTION_SOURCE_PRIVILEGES_ENABLED is set in my helm chart as an ExtraEnv of the gms.
The documentation mentions 4 privileges available for ingestion sources, View, Edit, Delete and Execute. But the View privilege is missing in the UI. I assume because of that for a non-admin user the entire "Data Sources" section is missing in the UI, even though the user owns an ingestion pipeline.
Using option 1 of the guide works, but that does not provide resource based access control to ingestion pipelines.

To Reproduce
Steps to reproduce the behavior:

  1. Set VIEW_INGESTION_SOURCE_PRIVILEGES_ENABLED
  2. As an admin user go to Settings > Permissions > Policies > Create new policy
  3. Select Ingestion Source as resource type
  4. Click on the privileges field, you'll only see Edit, Delete and Execute

Expected behavior
The View privilege should be available for the Ingestion Source resource, so Users can view the ingestion sources that they own.

Screenshots
Image

Deployment
Self hosted DataHub 1.3.0
Helm Chart 0.7.3

Metadata

Metadata

Assignees

Labels

bugBug report

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions