Conduit
Conduit copied to clipboard
refactor(database,authorization,grpc-sdk): Mongo authz query aggregations
This PR refactors the way we use access control in mongoose. Now, authorization module doesn't create views but returns authorized queries that calculate the accessible docs through aggregation.
What kind of change does this PR introduce?
- [ ] Bugfix
- [ ] Feature
- [ ] Code style update
- [x] Refactor
- [ ] Build-related changes
- [ ] Other (please describe)
Does this PR introduce a breaking change?
- [ ] Yes
- [x] No
The PR fulfills these requirements:
- [x] It's submitted to the
mainbranch - [ ] When resolving a specific issue, it's referenced in the PR's description (e.g.
fix #xxx, where "xxx" is the issue number)
If adding a new feature, the PR's description includes:
- [ ] A convincing reason for adding this feature
Other information:
This seems to be working as expected.
We should ideally delete any View docs for Mongo users, but given how the gRPC API already exposed view creation we could be deleting non-authz ones explicitly created by the users themselves.