dwsmith1983 opened a new issue, #5659:
URL: https://github.com/apache/datafusion-comet/issues/5659

   ### What is the problem the feature request solves?
   
   Follow-up from the native Delta Lake scan review (#5365). The planning 
payload for the native Delta scan retains object store options selected by 
provider-wide prefixes. Extracting credentials during execution payload 
construction, after final file selection, and including only the authorities 
required by the selected data files and DV locations would reduce credential 
retention and payload content.
   
   Tests should verify that planning payloads contain no credentials, execution 
payloads contain only the selected scopes, and credentials for external DV 
locations remain available.
   
   ### Describe the potential solution
   
   No response
   
   ### Additional context
   
   Raised in the #5365 review discussion. No leak was demonstrated; this is 
contract hardening.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to