A complete solution for open data platforms, enterprise data catalogs, data lakes and data management. Open source, mature, fully-featured and production ready.

DataHub

Hello. Not exactly an ingestion question per se, but posting here anyway.

We are on version 0.10.1.
Is it correctly understood that neither the OpenAPI or <http://Rest.li|Rest.li> APIs don't enforce authorisation, regardless of whether metadata service authentication is enabled or not?

Hi <@U01HXE1SE23>
You are correct. Please refer documentation for more detail <https://datahubproject.io/docs/authentication/introducing-metadata-service-authentication/>

if flag `METADATA_SERVICE_AUTH_ENABLED` is enabled then GMS service start enforcing the authentication.

Thank you. Do you know if there are any plans to ensure all apis are consistently protected by authorisation?

Hi <@U01HXE1SE23>
I think the flag `REST_API_AUTHORIZATION_ENABLED`will help. You might find answer in this thread <https://datahubspace.slack.com/archives/C029A3M079U/p1683048190938809?thread_ts=1673338726.422449&amp;cid=C029A3M079U>.

More information on the flag is available in doc <https://datahubproject.io/docs/authorization/policies/#fn-1>