Re: [PR] fix(security): match Snowflake catalog permissions regardless of case [superset]

[codeant-ai-for-open-source[bot] (via GitHub) via notifications]

codeant-ai-for-open-source[bot] commented on PR #46055:
URL: https://github.com/apache/superset/pull/46055#issuecomment-6682750219

   ## <a href="https://codeant.ai/"; title="CodeAnt AI"><img 
src="https://new-codeant-butcket.s3.us-west-1.amazonaws.com/badges/codeant-block-purple-v2.svg";
 width="28" height="28" align="absmiddle" style="vertical-align:middle" 
alt="CodeAnt" /></a>&nbsp; CodeAnt PR Risk
   
   **🔴&nbsp; High Risk**
   
   - The PR should not merge yet because Snowflake catalog checks treat quoted 
identifiers as case-insensitive.
   - A grant on a quoted catalog such as Sales can also match SALES, 
potentially exposing a distinct database and its schemas.
   
   **Assessed commit:** `c882dbc47b0c`


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org
For additional commands, e-mail: notifications-h...@superset.apache.org