Hi everyone, Based on the discussion that we had in the previous thread Support permission concepts in REST spec <https://docs.google.com/document/d/14nmuxxfzQsYo59o0Fbpb-pxOlzS6bVtduL8P8pwKZ6U/edit>, I have worked with some other engineers in Amazon to come up with this design:
https://docs.google.com/document/d/14nmuxxfzQsYo59o0Fbpb-pxOlzS6bVtduL8P8pwKZ6U/edit <https://docs.google.com/document/d/14nmuxxfzQsYo59o0Fbpb-pxOlzS6bVtduL8P8pwKZ6U/edit> It proposes a series of spec changes that, once implemented, can support catalogs to express access decisions, and allow engines to add support to enforce those access decisions. This would hopefully provide a good data governance story for enterprise Iceberg users. Would greatly appreciate any feedback! Best, Jack Ye