ggershinsky commented on PR #14465:
URL: https://github.com/apache/iceberg/pull/14465#issuecomment-3516553645

   A couple of questions wrt encrypted tables,
   
   1. What if the encryption.key-id table property is set 
(https://github.com/apache/iceberg/blob/main/core/src/main/java/org/apache/iceberg/TableProperties.java#L391)
 but a custom TO implementation ignores it. Do the users expect a table to be 
encrypted if the encryption.key-id is set? Should the implementors of custom 
TOs validate them by running the Iceberg unitests (inc TestTableEncryption)?
   
   2. The standard RESTableOperations class, built in Iceberg, uses a safe 
approach to getting the metadata object (directly from the REST catalog server, 
never from the metadata.json file that can be kept in untrusted storage). Can 
custom TO replacement can behave differently in this respect?
   
   If any of these points is a concern, then I believe it can be addressed just 
by adding a few lines to the RESTOperationsBuilder javadoc API comments. What 
do you think?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to