jerqi commented on issue #6346:
URL: https://github.com/apache/gravitino/issues/6346#issuecomment-2765305518

   Some surveys about privilege of the model.
   For Databricks, An [MLflow registered 
model](https://docs.databricks.com/aws/en/machine-learning/manage-model-lifecycle/)
 is a specific type of function. Models are listed separately from other 
functions in Catalog Explorer, but when you grant a privilege on a model using 
SQL, you use GRANT ON FUNCTION.
   
    For registered models, EXECUTE grants the ability to view metadata for all 
versions of the registered model, and to download model files.
   
   There are other privileges `CREATE MODEL` and `CREATE MODEL VERSION`.
   
   For Snowlake, there are two privileges `USAGE` and `CREATE MODEL`.
   
   In summary, I will add three privileges
   
   ```
   NAME                                                         Object
   CREATE_MODEL                                       SCHEMA, CATALOG,METALAKE
   CREATE_MODEL_VERSION                      MODEL, SCHEMA, CATALOG, METALAKE
   USE_MODEL                                              MODEL, SCHEMA, 
CATALOG, METALAKE
   ```
   USE_MODEL can view the meta of the model and all the versions of model. At 
the same time, it can download all the versions of the model.
   CREATE_MODEL_VERSION can control associate a model with a specific version.
   CREATE MODEL can control to create a model.
   Ownership can alter and drop the model.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@gravitino.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to