This is an automated email from the ASF dual-hosted git repository.
dimas pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/polaris.git
The following commit(s) were added to refs/heads/main by this push:
new 8b811ede4 Fix doc to remove privileges may take up to one hour to take
effect and add Policy to securable object (#2009)
8b811ede4 is described below
commit 8b811ede42053be58248de9a673e1b3b9f5c59fa
Author: CG <[email protected]>
AuthorDate: Sat Jul 26 04:54:02 2025 +0800
Fix doc to remove privileges may take up to one hour to take effect and add
Policy to securable object (#2009)
---
site/content/in-dev/unreleased/access-control.md | 6 +-----
1 file changed, 1 insertion(+), 5 deletions(-)
diff --git a/site/content/in-dev/unreleased/access-control.md
b/site/content/in-dev/unreleased/access-control.md
index 094abbe22..e8ed4b5e5 100644
--- a/site/content/in-dev/unreleased/access-control.md
+++ b/site/content/in-dev/unreleased/access-control.md
@@ -43,6 +43,7 @@ has the following securable objects:
- Namespace
- Iceberg table
- View
+- Policy
## Principal role
@@ -72,11 +73,6 @@ in the catalog, such as catalog namespaces or tables. You
can create one or more
You grant privileges to a catalog role and then grant the catalog role to a
principal role to bestow the privileges to one or more service
principals.
-> [!NOTE]
-> If you update the privileges bestowed to a service principal, the updates
won't take effect for up to one hour. This means that if you
-> revoke or grant some privileges for a catalog, the updated privileges won't
take effect on any service principal with access to that catalog
-> for up to one hour.
-
Polaris also supports a many-to-many relationship between catalog roles and
principal roles. You can grant the same catalog role to one or more
principal roles. Likewise, a principal role can be granted to one or more
catalog roles.
