Authorization in FDB

[PierreZ (Pierre Zemb)]

@markus.pilman

At Snowflake we’re currently working on a simple authorization feature. I wanted to announce this here in case others in the community find this useful and want to start preparing to use this (or want to start testing this as soon as we have it code-complete in the main branch).

This is a really nice feature, I’m already thinking on how we could leverage this

@markus.pilman

(other things, like workload isolation, automatic movement of tenants across clusters, meta-cluster management etc will be added in later versions of FDB).

From a layer engineer point-of-view, the tenant is behaving a lot like the directory in a sense that it will generate an id and a prefix. Because of how HCA works, moving a directory across clusters is not trivial. Do you have some ideas on how automatic movement of tenants across clusters will be implemented?

Also, I’m wondering if tenants should be automatically tagged?

EDIT: Another question: will we be able to import a tenant with a prefix?