Notes from today’s review meeting
- How does a user find the namespace they have access to? Can they query an API which will return back all the namespaces a user has access to?
- Can a user use Multi-tenancy without ACLs?
- Can the user remove ACLs and we still allow them to use dgraph? Maybe merge the namespace?
- Can they query without a JWT token? (which means ACLs are turned off)
- Queries/mutations should return errors if the namespace does not exist, currently (on the query/mutation PR) we return an empty response.
- We need to maintain namespace information in badger or a separate dgraph instance (the same will be needed to store user information)
- Mandatory namespace header for all operations. If a user hasn’t provided namespace, we return an error.
- Admins should be able to create/delete namespace. What happens if the namespace is deleted by the user? Should we delete all the data inside the namespace? Maybe we should force the user for confirmation in some way.