This message was deleted.

Hi @Oscar, yes you can have opal update different values in OPA's data from different sources. Just map out the sub keys so you don't have data merge conflicts

We are using

OPAL_POLICY_REPO_URL

to load data and policy. How to connect database?

E.g. you could have

data.roles

come from git (i.e.

/roles/data.json

) but

data.users

come from a DB.

As for the example of RBAC, we may define the data in DB, both users and roles. Now we want to OPAL can connect to the DB and load the data.

{
    "user_roles": {
        "alice": [
            "admin"
        ],
        "bob": [
            "employee",
            "billing"
        ],......
    "role_grants": {
        "customer": [
            {
                "action": "read",
                "type": "dog"
            },......
        ],
        "employee": [
            {
                "action": "read",
                "type": "dog"
            },......
        ],
        "billing": [
            {
                "action": "read",
                "type": "finance"
            },.....
        ]
    }
}

Load data initially: https://docs.opal.ac/getting-started/running-opal/run-opal-server/data-sources Update data on the fly: https://docs.opal.ac/tutorials/trigger_data_updates Create your own data fetcher to teach OPAL to load data from any data source: https://docs.opal.ac/tutorials/write_your_own_fetch_provider

Thanks. Let me have a look.