laurentgo commented on code in PR #13879:
URL: https://github.com/apache/iceberg/pull/13879#discussion_r2854248026
##########
open-api/rest-catalog-open-api.yaml:
##########
@@ -3441,6 +3441,118 @@ components:
additionalProperties:
type: string
+ ReadRestrictions:
+ type: object
+ description: >
+ Read restrictions for a table, including column projections and row
filter expressions.
+
+ A client MUST enforce the restrictions defined in this object when
reading data
+ from the table.
+
+ These restrictions apply only to the authenticated principal, user,
or account
+ associated with the request. They MUST NOT be interpreted as global
policy and
+ MUST NOT be applied beyond the entity identified by the
Authentication header
+ (or other applicable authentication mechanism).
+ properties:
+ required-column-projections:
+ description: >
+ A list of columns that require specific projections or transforms
to be applied.
+
+ If this property is absent, a reader MAY access all columns of the
table as-is
+ without any mandatory transformations.
+
+ If this property is present, each listed column MUST have its
specified
+ projection or action applied. Columns not listed in
required-column-projections
+ MAY be read as-is without any restrictions.
Review Comment:
Maybe I'm going too deep here, I saw that MAY as the option to have some
kind of transformations to be applied on the unlisted columns, vs the client is
allowed to select which columns to read or not which is true for all columns
(as well as it is true that the client can apply any transformation to any
column as long as it is done on top of the required ones)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]