joungmin/vpd-permission-poc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: make DDS demo data plane independent

Browse Source
This commit is contained in:
devmrko
2026-06-29 22:21:41 +09:00
parent 9eccf98e11
commit e7ca656a0f
5 changed files with 134 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
dds-backoffice/src/main/java/com/cloudhandson/ddsbackoffice/service/DdsQueryService.java
View File

@@ -47,12 +47,12 @@ public class DdsQueryService {
public List<DdsSourceOption> sources() {
return List.of(
new DdsSourceOption(
"PG", "PostgreSQL 원본", properties.pgObject(),
"DDS DATA GRANT가 허용한 PostgreSQL 데이터만 반환합니다."
"PG", "PG 데이터셋", properties.pgObject(),
"DDS 전용 로컬 PG 데이터셋에서 허용된 행만 반환합니다."
),
new DdsSourceOption(
"MY", "MySQL 원본", properties.myObject(),
"DDS DATA GRANT가 허용한 MySQL 데이터만 반환합니다."
"MY", "MY 데이터셋", properties.myObject(),
"DDS 전용 로컬 MY 데이터셋에서 허용된 행만 반환합니다."
)
);
}

8
dds-backoffice/src/main/resources/application.yml
View File

@@ -31,20 +31,20 @@ dds:
my:
label: MY 전용 사용자
description: MySQL 원본만 허용하는 DATA ROLE
username: ${DDS_BACKOFFICE_MY_USERNAME:ddsuser_my}
username: ${DDS_BACKOFFICE_MY_USERNAME:dds_demo_my}
password: ${DDS_BACKOFFICE_MY_PASSWORD:${DDSUSER_MY_PASSWORD:}}
pg:
label: PG 전용 사용자
description: PostgreSQL 원본만 허용하는 DATA ROLE
username: ${DDS_BACKOFFICE_PG_USERNAME:ddsuser_pg}
username: ${DDS_BACKOFFICE_PG_USERNAME:dds_demo_pg}
password: ${DDS_BACKOFFICE_PG_PASSWORD:${DDSUSER_PG_PASSWORD:}}
both:
label: 통합 사용자
description: 두 원본을 모두 허용하는 DATA ROLE
username: ${DDS_BACKOFFICE_BOTH_USERNAME:ddsuser_both}
username: ${DDS_BACKOFFICE_BOTH_USERNAME:dds_demo_both}
password: ${DDS_BACKOFFICE_BOTH_PASSWORD:${DDSUSER_BOTH_PASSWORD:}}
none:
label: 차단 사용자
description: 접속만 가능하고 DATA GRANT가 없는 사용자
username: ${DDS_BACKOFFICE_NONE_USERNAME:ddsuser_none}
username: ${DDS_BACKOFFICE_NONE_USERNAME:dds_demo_none}
password: ${DDS_BACKOFFICE_NONE_PASSWORD:${DDSUSER_NONE_PASSWORD:}}

8
dds-backoffice/src/main/resources/templates/dds.html
View File

@@ -98,10 +98,10 @@
</div>
</div>
<div class="matrix-grid">
<div class="matrix-card"><strong>ddsuser_my</strong><span>MY 원본 허용</span><small>PG 객체는 ORA-00942</small></div>
<div class="matrix-card"><strong>ddsuser_pg</strong><span>PG 원본 허용</span><small>MY 객체는 ORA-00942</small></div>
<div class="matrix-card"><strong>ddsuser_both</strong><span>PG + MY 허용</span><small>두 DATA GRANT 모두 적용</small></div>
<div class="matrix-card muted"><strong>ddsuser_none</strong><span>접속만 허용</span><small>데이터 권한 없음 · default deny</small></div>
<div class="matrix-card"><strong>dds_demo_my</strong><span>MY 데이터셋 허용</span><small>PG 객체는 ORA-00942</small></div>
<div class="matrix-card"><strong>dds_demo_pg</strong><span>PG 데이터셋 허용</span><small>MY 객체는 ORA-00942</small></div>
<div class="matrix-card"><strong>dds_demo_both</strong><span>PG + MY 허용</span><small>두 DATA GRANT 모두 적용</small></div>
<div class="matrix-card muted"><strong>dds_demo_none</strong><span>접속만 허용</span><small>데이터 권한 없음 · default deny</small></div>
</div>
</section>