Resolving tenant membership before running a Databricks SQL call
Requests that carry a tenant ID identify which tenant the caller wants, so access must be checked before any SQL is sent. The author walks through an open-source .NET 8 project, LakeWright.NET, whose example runs offline against a local loopback fixture with no workspace credentials. The sample allows a member to query their own tenant and denies access to another tenant without sending any statement. The resolver checks a trusted (tenant, principal) mapping, which should be replaced with a real membership lookup in production, and a parameterized statement is bound with a tenant context. The article also notes compatibility checks against .NET 8 and .NET 10 and points readers to troubleshooting steps.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.




Discussion (0)
Log in to join the discussion and vote.
Log in