roryqi commented on PR #14055: URL: https://github.com/apache/gravitino/pull/14055#issuecomment-6311808228
Could we extend `ObjectPolicyResolver` to return all matched policies with their metadata-object source(s), and let TMS apply the maintenance-specific nearest-level and same-level conflict rules? A policy may match through multiple tags at different levels, so the result should preserve those sources. This would also keep selector matching and effective-tag inheritance in one place; the existing `PolicyManager` list output can stay as it is. The current level-by-level matching can disagree with `EffectiveTagResolver`: if a table assigns `data_domain=risk` and its catalog assigns `data_domain=finance`, a catalog policy with `TAG_VALUE(finance)` can still be selected here, although the table assignment overrides the ancestor's tag. Please cover this case when sharing the resolution logic. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
