DataWorks allows you to share data sources in a workspace with another workspace or a specific member in another workspace by managing permissions on the data sources. After data sources are shared, you can view the shared data sources in the destination workspace. This topic describes how to share data sources by managing permissions on the data sources, and view the shared data sources.

Background information

The configurations of a data source include sensitive information such as the endpoint, username, and password. Developers only reference the data source to use the data in the data source. If sensitive information in a data source is public or the permissions to modify the configurations of the data source are not limited, security risks may occur. If multiple users modify the configurations of a data source, the data source may fail to be connected. As a result, the nodes that use the data source may fail.

To prevent this issue, Data Integration allows only the creators of data sources to manage permissions on data sources. The creators of data sources can grant permissions on the data sources to a specified workspace or user.

Limits

  • The permission management feature for data sources allows you to share data sources only across workspaces. You cannot share data sources among members in a workspace by managing permissions on the data sources.
  • Only the administrator and security administrator of a workspace, and the Alibaba Cloud account that is used to create the workspace can modify data sources in the workspace.

Precautions

If you want to control data read and write for a table in a data source, you can create a request processing policy for the data synchronization node that uses the data source in Approval Center. Approval Center allows the user to whom the Workspace Manager role is assigned to use the combination of a source and a destination to specify the data synchronization node on which the operation requests must be processed. For more information, see Create a request processing policy for Data Integration nodes.

Manage permissions on a data source

  1. Go to the Data Source page.
    1. Log on to the DataWorks console.
    2. In the left-side navigation pane, click Workspaces.
    3. In the top navigation bar, select the region where your workspace resides. Find the workspace and click Data Integration in the Actions column.
    4. In the left-side navigation pane of the page that appears, click Connection. The Data Source page appears.
  2. On the Data Source page, find the data source that you want to share and click Manage Permissions in the Operation column.
  3. In the dialog box that appears, configure permission settings for the data source.
    Permission settings for a data source
    No. Parameter Description
    1 Workspace All workspaces to which the current user belongs and all members in each workspace are displayed. You can share the data source with a workspace or specific members in a workspace.
    • If you configure a permission setting on the data source for a workspace, the related permissions are granted to all members in the workspace. Users who are added to the workspace as members after the permission configuration are automatically granted the permissions. After you configure a permission setting on the data source for a workspace, you can still configure a different permission setting on the data source for a specific member in the workspace. For example, after you configure the permission setting Not editable on a data source for a workspace, you can still configure the permission setting Editable on the data source for a specific member in the workspace.
    • You can control permission sharing among members in a workspace.
    • Only the administrator and security administrator of a workspace, and the Alibaba Cloud account that is used to create the workspace can modify data sources in the workspace.
    • A workspace administrator can use the data source only after the workspace administrator is granted the required permissions.
    2 Workspace type The type of each workspace. The type includes Simple and Standard.
    3 Permissions The type of the permission setting you can configure when you share the data source.
    • No permissions: The workspace or member has no permission on the data source.
    • Not editable: The workspace or member can use the data source but cannot modify or view the configurations of the data source.
    • Editable: The workspace or member can use and modify the data source.
      Notice If you configure the permission setting Editable on the data source for a workspace or member, the workspace or member can modify the data source. Proceed with caution when you configure the permission setting Editable.
    4 Parameters for batch settings The permission settings that you can configure for the selected workspaces or members at a time. You can configure the following permission settings for the selected workspaces or members at a time: Batch not editable, Batch editable, and Batch No permission.
  4. Click Confirm.
    You can share data sources across workspaces based on the following rules:
    • Share data sources between workspaces that are in basic mode:
      • If the source workspace is upgraded to the standard mode, each shared data source in the production environment of the source workspace exists in the destination workspace.
      • If the destination workspace is upgraded to the standard mode, each shared data source in the source workspace exists in both the development environment and production environment of the destination workspace.
    • Share data sources from a workspace that is in basic mode to a workspace that is in standard mode: Each shared data source in the source workspace exists in both the development and production environments of the destination workspace.
    • Share data sources between workspaces that are in standard mode: Each shared data source in the development environment of the source workspace exists in the development environment of the destination workspace. The same rule applies to the shared data sources in the production environment.
    • Share data sources from a workspace that is in standard mode to a workspace that is in basic mode:
      • You can share a data source in the production or development environment of the source workspace with the destination workspace. Only the data source in the production or development environment exists in the destination workspace. If you share a data source in both environments of the source workspace with the destination workspace, the newly shared data source overrides the existing data source in the destination workspace.
      • If the destination workspace is upgraded to the standard mode, the shared data source in the development environment of the source workspace exists in the development environment of the destination workspace. The same rule applies to the shared data source in the production environment.

View shared data sources

In the top navigation bar, select the workspace with which data sources are shared from the drop-down list. The Data Source page of the selected workspace appears. On this page, you can view all data sources that are shared with the workspace on the Normal and Has expired tabs.
  • Normal

    On the Normal tab, you can view the information about each shared data source, including the name, type, permission details, description, creation time, and environment.

    The permission information is displayed in the Connection information column of each shared data source. A shared data source is named in the format of Name of the workspace from which the data source is shared.Name of the data source. Normal tab

    If the current user has the Editable permission on a shared data source, Edit is displayed in the Operation column for the data source.

  • Has expired tab

    On the Has expired tab, you can view the data sources on which your permissions are expired.

    In the Cancel party column, you can view the user that revoked the permissions. In the Cancel sharing time column, you can view the time when the permissions were revoked. The information helps you identify the reason why a data source cannot be used. Cancel sharing