diff options
| author | coteeq <[email protected]> | 2025-08-18 21:25:02 +0300 |
|---|---|---|
| committer | coteeq <[email protected]> | 2025-08-18 21:41:47 +0300 |
| commit | 0737843a836ce53f6f8a4d5061886ff2c0f8d56a (patch) | |
| tree | 832e30eefe3ab1af752cdd631b966ea959124814 /library/cpp/cache/thread_safe_cache.cpp | |
| parent | 251d4e394d79c172a248e43fcccc2dc6c1daddf6 (diff) | |
YT-19137: Support row-level ACEs on master
* Changelog entry
Type: feature
Component: master
Allow specifying `expression` in ACEs.
Also, `full_read` now grants rowwise full read
(symmetric to columnar full_read) and allows
user to copy/concatenate/remote_copy the whole table.
RLACEs (ACEs with expression set) are now returned
by the `GetBasicAttributes` and `CheckPermission` methods.
The client is responsible to interpret them properly.
The null rlaces vector means that no RLS is in effect
for the action. Empty rlaces vector means that user
does not rights to read any rows in a table.
Non-empty rlaces vector's elements should be `||`'ed together
(or skipped if the expression is inapplicable and
`inapplicable_expression_mode=ignore`) and any row
not satisfying the resulting expression should not reach
the authenticated user.
commit_hash:7047e36178fe9a439a5dabad1c36ac11392a5e2d
Diffstat (limited to 'library/cpp/cache/thread_safe_cache.cpp')
0 files changed, 0 insertions, 0 deletions