Apache Druid

Hi, what are the minimum role permissions required for a user to be able to create a datasource in Druid?
We are looking to enable our users to create and manage their own data sources, but each data source must not be visible to the other user. How do we enable this, if the user itself can create the datasource?

minimum is `DATASOURCE WRITE` on the datasource they need to be able to create

although note that `DATASOURCE WRITE`, even to a single datasource, is a very broad permission that should only be granted to trusted users. see here: <https://druid.apache.org/docs/latest/operations/security-overview/>

in particular:

> Only grant STATE READ, STATE WRITE, CONFIG WRITE, and DATASOURCE WRITE permissions to highly-trusted users. These permissions allow users to access resources on behalf of the Druid server process regardless of the datasource.

so it sounds like druid's security model may not support what you want to do.