Hello,
While testing data gouvernance feature per space in the data model service, we noticed that it does work on the instance level but not on the data models level.
Here are the tests conducted:
Test 1:
We tested giving access to users to only instances that are in a specific space but applying the following ACL :
- dataModelInstancesAcl:
actions:
- READ
scope:
spaceIdScope: { spaceIds: ['test'] }
When requesting the data model, only instances in the test space are returned. ACL works on instance level. Perfect!
Test 2:
When applying a similar ACL on the data model level :
- dataModelsAcl:
actions:
- READ
scope:
spaceIdScope: { spaceIds: ['not_that_important_data_models'] }
In this case, we notice that we get revoked access to all data models, even data model in not_that_important_data_models space. We expected that we would be able to access only data models in not_that_important_data_models.
Could you please check ?
Thanks