Installation and Configuration

Installation

To install the Trino plugin:

1. Under your Trino installation, navigate to the plugin folder.
2. Create a folder with the name: plainid
3. Copy the following .jar files to the new folder:

• trino-plainid-1.0-SNAPSHOT-jar-with-dependencies.jar
• plainid-commons-4.6-SNAPSHOT-jar-with-dependencies.jar

Configuration

To configure the Trino Authorizer:

1. Under the trino/etc folder create a file with the name access-control.properties

2. Edit the file by adding the following values (explanation below):

access-control.name=plainid
plainid.u**rl=https://

3. After completing the installation and configuration of the Trino plugin, restart Trino.

4. Check the Trino logs to verify that the PlainID plugin was loaded properly:

INFO main io.trino.security.AccessControlManager

-- Loaded system access control plainid --

5. Your querying Application should inject the user ID making the query to the connection in the form of

6. For testing purposes, you can set this property in the driver configuration of your SQL client Application.

7. Additional parameters can also be sent in the extraCredentialsproperty.

Aside from the user that is parsed according to the userFieldconfig key, other key-value pairs in the extraCredentials are parsed according to the two prefix config keys and divided to Environment Variables and Entity Attributes sent in the runtime request in this form.

{
 entityAttributes: {
  key: [
   value
  ]
 },
 environment: {
  key: [
   value
  ]
 }
}

Parameter Explanation

Configuration Examples

plainid.clientid=PBU4VTXXXP4TZVLIKPAM
plainid.secret=yNe6SLuuMhUDY1rQTz2bUYdD9GerZzcHNDsvEhbg
plainid.template=CustomerIdentites
plainid.userField=customer-userid
plainid.entityAttrPrefix=entity_attribute
plainid.envVarPrefix=env_var

extraCredential Property

Customer-userid:user123;

entity_attribute.orgID:org9;

env_var.code:T221

Runtime Request from the PlainID Authorizer

{
clientId: PBU4VTXXXP4TZVLIKPAM,
clientSecret: yNe6SLuuMhUDY1rQTz2bUYdD9GerZzcHNDsvEhbg,
entityTypeId: CustomerIdentites,
entityId: user123,
entityAttributes: {
orgID: [  org9
			 ]
		 },
					 environment: {
	code: [
		 T221
			]
			 }
				

You should define the Policies for data filtering both for row level and column level.