roryqi commented on PR #12177: URL: https://github.com/apache/gravitino/pull/12177#issuecomment-5315705764
@JoegenUSTC Addressed in 3f4a238104. For phase 1, policy resolution is keyed by tag definition/name and is not principal-dependent. Principal-specific row filter or column mask behavior belongs to the downstream enforcement/policy content design, while ObjectPolicyResolver only selects/deduplicates policies and preserves provenance. The doc now also defines the response visibility matrix and conflict boundary. The exact column-mask content shape remains out of scope for this policy-on-tag design and should be defined with the row-filter/column-mask policy type design. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
