bowenliang123 commented on issue #3186:
URL: 
https://github.com/apache/incubator-kyuubi/issues/3186#issuecomment-1211632394

   > If the custom catalog name is presented such as iceberg.gftest.sampleice , 
this rule will work?
   
   Not fully tested but it supposed to work fine, since current implementation 
rely on `identifier: Option[Identifier]` of `DataSourceV2Relation`. The 
identifier itself ` Identifies an object in a catalog` (refer to Spark code 
base) which is a concept inside the catalog.
   
   In suggested case, session catalog `spark_catalog` was used as it works for 
both Iceberg and non-Iceberg 
tables.(<https://iceberg.apache.org/docs/latest/spark-configuration/#replacing-the-session-catalog>)
   
   Currently authorization for all the catalogs are relied on the same 
singleton of Ranger Plugin and the same Ranger policy. For further implements 
of Authz module, I suggest to change to use different plugin and policies for 
each catalog.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to