Hello Team, I was having a small doubt. We have implemented the custom authenticator plugin, we have implemented in a way that we return different user URN for users belonging to different domains to datahub after Authentication, so that user wouldn’t be able to change datasets that belong to other domain. This was working fine for graphQL API. But when user hit openAPI for adding or deleting dataset he is able to do it without any domain restriction. I would like to know if policies aren’t considered when we use OpenAPI?

Hi @best-wire-59738! So unfortunately, the OpenAPI + Rest.li APIs are considered "low level", "internal" APIs that in general your end users should not be using on their own. As such, the policy-based Authorization is not currently applied to them. You can think of them as exposing the raw underlying Database behind DataHub. cc @orange-night-91387 @brainy-tent-14503