Hello. Not exactly an ingestion question per se, b...
# ingestion
w
Hello. Not exactly an ingestion question per se, but posting here anyway. We are on version 0.10.1. Is it correctly understood that neither the OpenAPI or Rest.li APIs don't enforce authorisation, regardless of whether metadata service authentication is enabled or not?
1
g
Hi @wonderful-quill-11255 You are correct. Please refer documentation for more detail https://datahubproject.io/docs/authentication/introducing-metadata-service-authentication/
if flag
METADATA_SERVICE_AUTH_ENABLED
is enabled then GMS service start enforcing the authentication.
w
Thank you. Do you know if there are any plans to ensure all apis are consistently protected by authorisation?
g
Hi @wonderful-quill-11255 I think the flag `REST_API_AUTHORIZATION_ENABLED`will help. You might find answer in this thread https://datahubspace.slack.com/archives/C029A3M079U/p1683048190938809?thread_ts=1673338726.422449&cid=C029A3M079U.
More information on the flag is available in doc https://datahubproject.io/docs/authorization/policies/#fn-1