singhpk234 opened a new pull request, #2048: URL: https://github.com/apache/polaris/pull/2048
### About the PR This PR adds proposed policy spec proposed as part [[OSS] Row and Column Based Access Control: Policy Definitions](https://docs.google.com/document/d/12nhS0GX1U1PqEBKp74bIBZsL9kB5duDlN9diHJAhJsM/edit?tab=t.0#heading=h.loa0wu1y4ox1) This uses iceberg expressions, to define row level filters and uses column projections as way to project, presently since we are just talking of column (waiting for UDF's in Apache Iceberg to standardize), May be we can use transforms for the projections ? open to it ! This additionally introduces 2 context variables which are resolved at the catalog end based on the caller $current_prinicipal, checks if the current principal is the principal activated, if yes makes this as true ! $current_principal_role, checks if the the underlying role is one of the activated principal roles based on current caller context ! so a policy being defined with this context variables are replace inline and evaluated using iceberg expression sdk ! so when ever the caller calls /get-applicable-policies it gets back context resolved variables and row and column policy TODO : Policy merging please check tests for E2E tests Note : This is for engines who wants to get the policies directly ! rather than getting the secure view and are willing to integrate to the Polaris Policy Store directly :) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
