Add permission-aware datasource search source

2026-08-06 16:06:17 +02:00
parent 7216ac4842
commit 492306f6a7
6 changed files with 382 additions and 4 deletions
@@ -104,6 +104,13 @@ Consumers should be able to request the governance explanation and dependency
 impact separately from row access. Seeing catalogue metadata must not imply
 permission to read protected data.

+When Search is installed, Datasources contributes catalogue entries as a native
+search source. Only the stable catalogue identity, display name, description,
+mode, shape, lifecycle state, classification, publication state, and authority
+mode are indexed. Every result is re-authorized against the current tenant and
+catalogue-read permission. Rows, schemas, connector references, credentials,
+arbitrary metadata, and provenance remain outside the derived search index.
+
 ## Next Providers

 Connector providers should cover: