search

databricks / cli

Databricks CLI
Other
132 stars 50 forks source link

Include a permissions section in all templates #1713

Closed lennartkats-db closed 3 weeks ago

lennartkats-db commented 1 month ago

Changes

This updates the templates to include a permissions section. Having a permissions section is a best practice, is helpful to understand the notion of permissions, and helps diagnose permission errors (https://github.com/databricks/cli/pull/1386).

This is a cherry-pick from https://github.com/databricks/cli/pull/1387.

This change was verified to work both in dev and prod. Existing unit tests validate the validity of the templates in these modes.

lennartkats-db commented 3 weeks ago

Yeah, no functional change. If Alice deploys, then Alice is still the OWNER like before, even though there's a permission that says she has CAN_MANAGE. If the template is freshly created from the template and Bob deploys, Bob would always get an error about run_as Alice and/or deployment to Users/Alice.