c-thiel commented on code in PR #13879:
URL: https://github.com/apache/iceberg/pull/13879#discussion_r3381327041
##########
open-api/rest-catalog-open-api.yaml:
##########
@@ -3480,6 +3480,341 @@ components:
additionalProperties:
type: string
+ ReadRestrictions:
+ type: object
+ description: >
+ Read restrictions for a table, including column projections and row
filter expressions.
+
+ A reader MUST enforce the restrictions defined in this object when
reading data
+ from the table. Read restrictions returned in a loadTable response
apply to every
Review Comment:
nit: just want to make one thing explicit since it's the linchpin:
fail-closed on any restriction a reader can't fully enforce (not just the
`Unknown` action) is what keeps an admin's one-time trust decision safe when
the *server later adds new restriction types* — otherwise an already-trusted
engine could silently drop them.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
