1110978 - Add permission model to esFrontLine, using Persona [3 of 3]

Status: RESOLVED INVALID

(Testing :: General, defect)

Description

[Kyle Lahnakoski [:ekyle]]

esFrontLine is a dumb-but-effective firewall to protect ElasticSearch clusters from potentially destructive data updates.  Mozilla is lucky that much of their data is wholly public, so the security model is simple:  Everything is public, or everything is private.  

It is important that a more sophisticated security model be developed so active data stores, like BMO/ES, are useful to a larger audience.

This bug covers only the first iteration of the security model:  Whitelisting and blacklisting the tables and columns (cubes and dimensions) that can be inspected, along with limiting the available rows (slices).

Comment 1

[Kyle Lahnakoski [:ekyle]]

old tech