Trino

Secure data access and collaboration rely heavily on data access control, which plays a crucial role in managing both analytical and operational data. In today's security landscape, identity is given top priority, and as such, data access control should be designed to be identity-aware, dynamic, and capable of offering fine-grained controls. The task of controlling access to data poses a significant challenge for many organizations, which have traditionally relied on the built-in capabilities of their data repository or application filtering mechanisms to access data. However, these methods present several limitations and have become increasingly inadequate as data access control requirements evolve.

The PlainID trino Authorizer offers a solution by providing fine-grained controls over data selection access through the trino data management platform.

The PlainID trino Authorizer is an access plugin that enables receiving data-filtering instructions based on the policies defined in the PlainID Authorization Platform. The PlainID trino plugin is a System Access Control SPI responsible for intercepting Trino Authorization queries before they are executed and altering them according to the PlainID Policy Decision for a specific user.

1. The end user access the app.
2. The user is redirected to complete the authentication process on the IdP.
3. The application / BI tool requests access to data through trino.
4. The PlainID Authorizer requests an access decision from the PlainID PDP which responds with a dynamically calculated access decision based on the policies configured within the PlainID Authorization Platform. The response is translated to a filtered data query.
5. The original query is modified based on the authorization policy for the end user.