Nessie Open Policy Agent integration

[Björn W]

I'm actively searching for an example of how to integrate Nessie with the Open Policy Agent. Trino for example relies on it and I would like to prevent to later have two different authorization systems to maintain.

Are u aware of anything?

Thank you in Advance!

[Dmitri Bourlatchkov]

Hi Björn,

I'm not sure we have any specific examples for the Open Policy Agent.

I suppose it is going to fit into the BatchAccessChecker SPI. There is an existing OSS implementation for that, which is based on CEL expression.

Alternative implementations are quite possible with an addition of some new code.

Cheers,

Dmitri.

--
You received this message because you are subscribed to the Google Groups "projectnessie" group.
To unsubscribe from this group and stop receiving emails from it, send an email to projectnessi...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/projectnessie/17330a5c-8adb-4a83-aa46-7e97c44bee02n%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Björn W]

Hi Dmitri,

thanks a lot for the feedback, I'll give it a try. It confuses me a lot that in the area of big data tooling there are so many different players when it comes to authz, is it OPA, is it CEL expressions, is it Ranger or OpenFGA.

When it comes to authn then there is a standard but for authz it's like the wild west ;-)

Cheers,

 Björn