I have some data that is collected by several sensors. Some users may own many of these sensors. I want to keep all the measures in a single database in InfluxDB. To differentiate the sensors I pretend to add some tags (such as 'sensor_id=aaa', 'sensor_id=bbb', etc).

I have read the documentation and it seems that there is no security option nor anything similar that allows me to restrict any given user to the sensors that he owns or has permissions to read.

Version 0.8 has this option that seems to do what I need. In version 0.9 (which I'm using) I can't find anything similar.

I want to use Grafana to allow people to create some dashboards, that's why I need InfluxDB, but I'm stuck on this part.

Does some configuration/feature exist that helps me to do this? Should I try a different approach? Any suggestions? Is there some other tool that would be more helpful in my case?



First and foremost, I would suggest moving away from any version of InfluxDB before 1.0 as there have been a number of improvements to InfluxDB since 0.9.

At the moment there is no way to limit read and write access for a particular tag. This functionality is a planned feature in version 1.2 of Enterprise InfluxDB.

That being said there is one alternative implementation that I see as feasible. OSS InfluxDB allows administrations to set database level read and write permissions. You could use this to your advantage. Rather than have a single database and setting permissions on the tags within that database, you'd have a database for each user and give each user read and write access to that database.

One issue that comes to mind with this approach is that if you have 1000s of users, you'll end up having 1000s of databases. This may cause some weirdness within InfluxDB itself. If you did have 1000s of users, you could simply partition your users across multiple InfluxDB instances.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.