Hi team, I recently filed PR#2422 <https://github.com/apache/polaris/pull/2422> and there was an ask there about creating a mailing list thread for discussion.
The tl;dr of this change is that Polaris currently allows the creation of namespaces & tables outside of a catalog allowed-locations. The PR fixes this behavior for namespaces, which in turn should also fix at least some scenarios where tables can be created outside of allows-locations as well. There will be some followup work to fix the behavior for tables more generally, but the PR is scoped just to namespace locations. This does represent a small behavior change OOTB, as namespaces that were previously OK to create in a given (potentially unsafe) location will now not be able to be created. If you're interested in this change or the related investigation please feel free to comment here, on the PR, or on the issue linked to the PR. Cheers, Eric M.