lookml-access-grants

分类: 测试与安全 | 上传者: lkrdev | 下载: 0 | 版本: v1.0（最新）

Use this skill to create Access Grants for row-level or object-level security.

更新日志: Source: GitHub https://github.com/lkrdev/lookml_skills

目录结构

当前层级: .agents/skills/lookml-access-grants/

📄 SKILL.md 1.1 KB

SKILL.md

---
name: lookml-access-grants
description: Use this skill to create Access Grants for row-level or object-level security.
---

# Instructions

1.  **Define Access Grant**:
    *   Defined at the **Model** level.
    *   Links a `user_attribute` to a set of `allowed_values`.
2.  **Apply Access Grant**:
    *   Use `required_access_grants: [grant_name]` at the Explore, Join, View, or Field level.
    *   User must match **all** listed grants to see the object.
3.  **Best Practices**:
    *   **Exact Match**: `allowed_values` must match the user attribute value distinctively (no wildcards/partial matches).
    *   **Additive**: Grants are additive. If a View requires Grant A and a Field requires Grant B, the user needs *both* to see the field.

# Examples

## Basic Access Grant

```lookml
# In model file
access_grant: can_view_finance {
  user_attribute: department
  allowed_values: ["finance", "executive"]
}

# In view file
view: finance_data {
  required_access_grants: [can_view_finance]
  # ...
}
```

## Field-Level Security

```lookml
dimension: salary {
  type: number
  sql: ${TABLE}.salary ;;
  required_access_grants: [can_view_finance]
}
```

登录后下载/点赞/收藏 ❤ 4 | ★ 0

lookml-access-grants

目录结构

SKILL.md

举报内容

提示