Policy enforcement in search and storage
Status
-
Proposed -
Trialing -
Under review -
Approved -
Retired
Context & Scope
We need to be able to enforce policies in different services in OSDU. When talking about data, storage and search services present different type of the problem. In storage, a simple evaluation of requested record against policies will suffice. In case of search, it is unpractical to split user query and evaluation of policies (imagine internally fetching million records and evaluating each one separately).
Decision
Design how policies will be enforced in storage and search service. In case of search, evaluate feasibility of treating policies as Elasticsearch obligations. Once design is reviewed, proceed with implementation.
Rationale
Storage and search are key services to which policies should be applied.
Consequences
Ability to satisfy OSDU R3 use cases.
When to revisit
N/A
Decision criteria and trade-offs
N/A
Decision timeline
July 2020