Starburst

Effective data access and collaboration require robust data access control, which is critical in managing both operational and analytical data. In the current security environment, identity is of utmost importance, and data access control must be designed to be dynamic, identity-aware, and capable of providing precise controls. Managing data access poses a significant challenge for many organizations that have traditionally relied on their data repository's built-in capabilities or application filtering mechanisms. However, these methods have limitations and are increasingly insufficient as data access control requirements evolve.

To address these challenges, the PlainID Starburst Authorizer provides a solution that delivers fine-grained controls over data selection access via the Starburst data management platform.

The PlainID Starburst Authorizer is an access plugin that enables receiving data-filtering instructions based on the policies defined in the PlainID Authorization Platform. The PlainID Starburst plugin is a System Access Control SPI responsible for intercepting Trino Authorization queries before they are executed and altering them according to the PlainID Policy Decision for a specific user.

1. The end user access the app.
2. The user is redirected to complete the authentication process on the IdP.
3. The application / BI tool requests access to data through Starburst.
4. The PlainID Authorizer requests an access decision from the PlainID PDP which responds with a dynamically calculated access decision based on the policies configured within the PlainID Authorization Platform. The response is translated to a filtered data query.
5. The original query is modified based on the authorization policy for the end user.