A common request is to implement row based security. Teiid has added the ability to define a permission condition for this purpose:

<permission>
<resource-name>...</resource-name>
<condition>sql</condition>
...
</permission>

The sql should resolve against the resource specified, ideally designer would check that as well.

See TEIID-2311 and the reference for how these conditions are applied.

    <data-role name="base-role" any-authenticated="true">
        <description>Conditional access</description>
 
        <permission>
            <resource-name>modelName.tblName</resource-name>
            <condition constraint="false">column1=user()</condition>
        </permission>
 
    </data-role>