有沒有人嘗試在 Apache Superset 中實現多租戶

Question

我嘗試從 Github 項目克隆，但它對我不起作用。 在 Apache 超集中實現多租戶的任何其他方式。 我從這個來源嘗試了https://github.com/apache/incubator-superset/pull/3729/files/5a063f37d77efc0d4a50ba8406a62e8eee4964ed 。 但我沒有實現多租戶。 我被這些錯誤困住了。

Traceback (most recent call last):
  File "C:\Users\ELCOT\AppData\Local\Programs\Python\Python36\lib\runpy.py", line 193, in _run_module_as_main
    "__main__", mod_spec)
  File "C:\Users\ELCOT\AppData\Local\Programs\Python\Python36\lib\runpy.py", line 85, in _run_code
    exec(code, run_globals)
  File "D:\myfolder\my-superset\venv\Scripts\flask.exe\__main__.py", line 9, in <module>
  File "d:\myfolder\my-superset\venv\lib\site-packages\flask\cli.py", line 967, in main
    cli.main(args=sys.argv[1:], prog_name="python -m flask" if as_module else None)
  File "d:\myfolder\my-superset\venv\lib\site-packages\flask\cli.py", line 586, in main
    return super(FlaskGroup, self).main(*args, **kwargs)
  File "d:\myfolder\my-superset\venv\lib\site-packages\click\core.py", line 782, in main
    rv = self.invoke(ctx)
  File "d:\myfolder\my-superset\venv\lib\site-packages\click\core.py", line 1259, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
  File "d:\myfolder\my-superset\venv\lib\site-packages\click\core.py", line 1259, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
  File "d:\myfolder\my-superset\venv\lib\site-packages\click\core.py", line 1066, in invoke
    return ctx.invoke(self.callback, **ctx.params)
  File "d:\myfolder\my-superset\venv\lib\site-packages\click\core.py", line 610, in invoke
    return callback(*args, **kwargs)
  File "d:\myfolder\my-superset\venv\lib\site-packages\click\decorators.py", line 21, in new_func
    return f(get_current_context(), *args, **kwargs)
  File "d:\myfolder\my-superset\venv\lib\site-packages\flask\cli.py", line 425, in decorator
    with __ctx.ensure_object(ScriptInfo).load_app().app_context():
  File "d:\myfolder\my-superset\venv\lib\site-packages\flask\cli.py", line 388, in load_app
    app = locate_app(self, import_name, name)
  File "d:\myfolder\my-superset\venv\lib\site-packages\flask\cli.py", line 240, in locate_app
    __import__(module_name)
  File "D:\myfolder\my-superset\Apache-superset-multi_tenancy_new\superset\__init__.py", line 22, in <module>
    from superset.multi_tenant import MultiTenantSecurityManager
  File "D:\myfolder\my-superset\Apache-superset-multi_tenancy_new\superset\multi_tenant.py", line 9, in <module>
    class MultiTenantUser(User):
  File "d:\myfolder\my-superset\venv\lib\site-packages\flask_sqlalchemy\model.py", line 67, in __init__
    super(NameMetaMixin, cls).__init__(name, bases, d)
  File "d:\myfolder\my-superset\venv\lib\site-packages\flask_sqlalchemy\model.py", line 121, in __init__
    super(BindMetaMixin, cls).__init__(name, bases, d)
  File "d:\myfolder\my-superset\venv\lib\site-packages\sqlalchemy\ext\declarative\api.py", line 75, in __init__
    _as_declarative(cls, classname, cls.__dict__)
  File "d:\myfolder\my-superset\venv\lib\site-packages\sqlalchemy\ext\declarative\base.py", line 131, in _as_declarative
    _MapperConfig.setup_mapping(cls, classname, dict_)
  File "d:\myfolder\my-superset\venv\lib\site-packages\sqlalchemy\ext\declarative\base.py", line 160, in setup_mapping
    cfg_cls(cls_, classname, dict_)
  File "d:\myfolder\my-superset\venv\lib\site-packages\sqlalchemy\ext\declarative\base.py", line 192, in __init__
    self._setup_inheritance()
  File "d:\myfolder\my-superset\venv\lib\site-packages\sqlalchemy\ext\declarative\base.py", line 601, in _setup_inheritance
    "Can't place __table_args__ on an inherited class "
sqlalchemy.exc.ArgumentError: Can't place __table_args__ on an inherited class with no table.

我無法找到有關此錯誤的任何解決方案。

Answer 1

有一個名為“行級安全性 (RLS)”的新功能。

https://github.com/apache/incubator-superset/pull/8699

它在 0.36 版中合並，但有一個錯誤，因此在最后一分鍾被排除並轉移到 0.37。 默認情況下它是禁用的，可以在配置文件superset_config.py中啟用：

ENABLE_ROW_LEVEL_SECURITY = 真

您會在“安全性”中找到一些菜單項，允許您添加將添加到查詢中的自定義過濾器。 它由數據源配置，過濾器可以依賴於用戶角色。 SQL 是免費的，因此非常靈活。 所以主租戶邏輯需要應用到SQL中你的租戶model。

您也可以使用 JINJA 腳本，但在這里您僅限於超集自己的變量，因為自定義變量將存在於不同的機器上（UI 與后端，即 celery 工作人員）。

該功能已經在不同的生產環境中使用（此信息來自開發列表）。