trinodb / trino

Official repository of Trino, the distributed SQL query engine for big data, formerly known as PrestoSQL (https://trino.io)
https://trino.io
Apache License 2.0
10.51k stars 3.03k forks source link

Enable System Access Control to make decision using Catalog Configuration #24006

Open raj-manvar opened 3 weeks ago

raj-manvar commented 3 weeks ago

Currently the SystemAccessControl interface gives access to CatalogSchemaName or CatalogSchemaTableName object which only contains the catalog name, Schema name and Table name.

This request is to add provide additional Catalog Configuration to the Access Control plugin to make access control decisions.

For example, when using the Hive metastore https://trino.io/docs/current/object-storage/metastores.html, if certain users don't have access to any data in Europe, having the hive.metastore.glue.region property can help make the decision.