JoegenUSTC commented on PR #12177: URL: https://github.com/apache/gravitino/pull/12177#issuecomment-5288748545
@roryqi Thanks for this design. Two questions about column masking under the phase-1 model: **1. Can masking vary by user/role?** Phase-1 resolves policies by tag presence only, so a column's object policy is the same for everyone who queries it. But column masking is normally per-principal (Ranger/Snowflake/Databricks show the same column differently depending on the querying role). Does per-user/role masking only come with the future tag-expression ABAC step, or is there a way to make masking depend on the principal already under policy-on-tag? **2. What does a masking policy's content look like?** The doc defines the content for `system_iceberg_compaction`. Is there a planned content shape for a column-mask policy type (mask type, arguments, etc.), or is that intentionally left out for now? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
