apache / polaris

Apache Polaris, the interoperable, open source catalog for Apache Iceberg
https://polaris.apache.org/
Apache License 2.0
1.17k stars 130 forks source link

[FEATURE REQUEST] Allow list permissions in vended credentials #448

Open jasonf20 opened 1 week ago

jasonf20 commented 1 week ago

Is your feature request related to a problem? Please describe.

We are interested in using the vended credentials for Orphan File cleanup. However it seems that currently the provided vended credentials never allow listing. I see the infrastructure supports passing PolarisStorageActions.LIST which would allow this, but no caller seems to pass this in from what I can tell.

Describe the solution you'd like

Allow users to add a permission to the catalog role that enables file listing which will then ensure the vended credentials include the list operation permissions.

Describe alternatives you've considered

No response

Additional context

I believe spark also doesn't use the vended credentials at the moment and this might be the reason. Though I'm not sure if there is another reason for this.