Authentication in Druid?

We are evaluating Druid for our real time processing requirements and were wondering if Druid supports any kind of user authentication?
We are interested in role based user authentication where certain user can only do read operations and others can do all operations??



Druid does not have built-in authentication/authorization, but it allows you to plugin arbitrary servlet filters on the http endpoints. You can write a extension with your “auth” filter that can authenticate the requests coming to druid.

You can find example of servlet filter extension in the unit tests at
Also, you can take a look at to see how to write a druid extension.

Note that even with authorization at the servlet level, there is no inherent security between datasources. Meaning that if you can query anything you can query everything.