GitHub user jpartyka-gemius created a discussion: Fine grain Branch/Tag 
creation control

I am looking for a way to allow users creating, writing to branches/tags with a 
given prefix, but the same time restricting their access other branches like.
For example:
* userA can create/write to  branches/tags starting with "userA_"
* userB can create/write to branch "main"
* both userAand userB can read from all branches

In 1.2.0 "Finer Grained Operations and Privileges For Update Table" was added 
that added some specific permissions (ADD_SNAPSHOT and SET_SNAPSHOT_REF). But 
these permissions are at the table level, so it is not possible to limit
branch/tag tha are affected.

>From what I can tell branch/tag name is not passed when checking permissions, 
>so this is also not possible in External systems like OPA.

Is there a way to achieve this with current polaris implementations? If not, 
what do you thing about such feature?

GitHub link: https://github.com/apache/polaris/discussions/4768

----
This is an automatically sent email for [email protected].
To unsubscribe, please send an email to: [email protected]

Reply via email to