Hi folks,

Thanks, everyone, for the great discussion and feedback on the
PolicyMappingRecord topic.

To summarize, we have general agreement that we need a new record,
PolicyMappingRecord, to represent and persist the relationship of a Policy
Attachment (e.g., attaching a policy to a table). To support this, we will
introduce this new persistence item and add the necessary persistence APIs
and MetastoreManager APIs to ensure proper interaction. PolicyMappingRecord
and its persistence APIs are designed similarly to existing GrantRecords,
which store privilege granting relationships between securable and grantee
entities.

Additionally, to allow policy-related efforts to proceed in parallel with
the ongoing persistence refactoring and new persistence implementation, the
new persistence APIs will default to raising a "not implemented" error.
This allows the new persistence implementation to optionally support Policy
Mapping persistence APIs. If these APIs are not implemented, policy
attachment and detachment will simply be unsupported for that persistence
backend.

I've consolidated the discussions and design into a PR:
https://github.com/apache/polaris/pull/1104

Please take a look when you have a chance. Let me know if you have any
questions.

Best regards,
Honah (Jonas)

Reply via email to