Controlled access provision for data exploration in managed compute datasets

A method comprising:

• creating a workspace on a compute cluster for a user, the user having permissions to the workspace;
• and
• provisioning the compute cluster within a cloud computing infrastructure, the compute cluster including a code analyzer, the code analyzer being configured to:
• receive a data query from a task executing on the compute cluster;
• identify a query operation included in the data query;
• compare the query operation to a list of prohibited query operations for the workspace to which the user has the permissions;
• and
• terminate the data query without execution when the query operation is in the list of prohibited query operations for the workspace to which the user has the permissions.

A non-transitory computer-readable medium storing instructions that are operative upon execution by a processor to:

• create a workspace including a compute cluster for a user, the user having permissions to the workspace;
• and
• provision the compute cluster within a cloud computing infrastructure, the compute cluster including a code analyzer, the code analyzer being configured to:
• receive a data query from a task executing on the compute cluster;
• identify a query operation included in the data query;
• compare the query operation to a list of allowed query operations for the workspace to which the user has the permissions;
• and
• terminate the data query without execution when the query operation is not in the list of allowed query operations for the workspace to which the user has the permissions.