[Question] ROR Enterprise - multi tenancy


(Salko Nuhanovic) #1

Hi ROR-Community,

is it possible to have a generic ROR multi-tenancy configuration?

By generic I mean to provide a proper configuration in readonlyrest.yaml that only allows index access to the user which has created the index.

This would actually be possible by knowing upfront which index will be created for which user, but if I do not know which customer will create which index I cannot configure it properly.

Thanks & BR,
Salko


(Simone Scarduzio) #2

Hi Salko,

Indices don’t carry information about who created them.
However, a way to achieve this would be to only let users create indices prefixed or suffixed with their username. And we can enforce this with our ACL.
Of course we can also add an ACL block to let them read only from those indices.

Would this work for you?