Hi team, i have thousands of users for which i need to apply rls, so is there any dynamic way , or i have to onboard the users and add them in broker.conf? pinot.broker.access.control.principals.alice.password=alice123 pinot.broker.access.control.principals.admin.password=admin pinot.broker.access.control.principals.alice.tables=user_data_REALTIME pinot.broker.access.control.principals.alice.user_data_REALTIME.rls=userId='102'

this acl is config based

any doc for using zookeeper based?

In this also user needed to onboarded via api then restart the servers and brokers. Is there any other better way?

no need to restart

ok using this i can manage this usecase that user1 have read access to table1 and user1 can see only rows where customer_id (column in table1) = user1?

acl is on table level only, no row or column level acl

but my usecase was row level so for that i should make that logic on superset? I was hoping that in some way pinot also provide similar rule RLS feature like superset

there is a PR working on this: https://github.com/apache/pinot/pull/17295 It's not supported yet