When an extension returns a Warning check result, DataWorks can automatically trigger an approval flow to decide whether to allow the related operation. A request processing policy defines who approves the request and in what order.
Prerequisites
Before you begin, make sure that:
Your DataWorks workspace is on Enterprise Edition. Upgrade the DataWorks service if needed.
Your account has one of the following permission levels:
Alibaba Cloud account or RAM user with AliyunDataWorksFullAccess — can select all workspaces as managed workspaces. The policy takes effect across all managed workspaces. For more information, see View the permissions of a RAM user and Grant permissions to a RAM user.
Workspace Administrator role — can only select the workspace they belong to. The policy takes effect in that workspace only.
How it works
The following steps show how a request processing policy fits into the extension approval flow:
Trigger — An extension detects an operation (for example, a data download) and returns a Warning check result. When a global extension for data download is enabled, the data download operation in all workspaces is blocked until the extension returns a result.
Policy lookup — DataWorks checks whether a request processing policy is configured for the workspace where the operation was detected.
If a policy exists, the approval flow starts automatically.
If no policy is configured, the operation proceeds without blocking.
Approval — The permission request is forwarded to approvers in sequence. Each approver receives a notification only after the previous approver approves.
Result — The operation is allowed or blocked based on the final approval decision.
A global extension takes effect in all workspaces once enabled. If no request processing policy is configured for a specific workspace, events in that workspace pass the check by default and are not blocked.
Go to the Processing Policy for Extension page
Log on to the DataWorks console. In the top navigation bar, select a region. In the left-side navigation pane, choose Data Development and O&M > Data Development. Select a workspace from the drop-down list and click Go to Data Development. The DataStudio page appears.
Click the
icon in the upper-left corner and choose All Products > More > Approval Center.In the left-side navigation pane, choose Policies > Extension.
Create a request processing policy
In the upper-right corner of the Processing Policy for Extension page, click Create Policy.
Select the managed workspaces that this policy applies to. The workspaces available depend on your account permissions (see Prerequisites).
In the Configure Processing Links step, add one or more request processing nodes. For each node, specify an approver and the approver's role. Supported approver types: Requests are forwarded to approvers in sequence. An approver receives a notification only after the previous approver approves the request.
Approver type Description DataWorks workspace-level role A role defined at the workspace level DataWorks workspace member An individual member of the workspace Alibaba Cloud account The root account or a RAM user Click Submit in the lower-right corner.
View the associated extension
On the Processing Policy for Extension page, find the policy and click Associate Extension in the Actions column. The Risk identification rules page appears, where you can view or update the risk response configuration for the associated extension.
For more information about configuring a risk response, see Risk identification rules.
What's next
Risk identification rules — configure risk identification rules and set the risk response to Approval to trigger the request processing policy.
CallbackExtension — get the check result of an extension for extension point events.