[GitHub] [incubator-kyuubi] melin opened a new issue, #3693: [FEATURE] Support Snowflake Dynamic Data Masking

[GitBox <gi...@apache.org>]

melin opened a new issue, #3693:
URL: https://github.com/apache/incubator-kyuubi/issues/3693

   ### Code of Conduct
   
   - [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)
   
   
   ### Search before asking
   
   - [X] I have searched in the [issues](https://github.com/apache/incubator-kyuubi/issues?q=is%3Aissue) and found no similar issues.
   
   
   ### Describe the feature
   
   Using Dynamic Data Masking
   The following lists the high-level steps to configure and use Dynamic Data Masking in Snowflake:
   
   Grant masking policy management privileges to a custom role for a security or privacy officer.
   
   Grant the custom role to the appropriate users.
   
   The security or privacy officer creates and defines masking policies and applies them to columns with sensitive data.
   
   Execute queries in Snowflake. Note the following:
   
   Snowflake dynamically rewrites the query applying the masking policy SQL expression to the column.
   
   The column rewrite occurs at every place where the column specified in the masking policy appears in the query (e.g. projections, join predicate, where clause predicate, order by, and group by).
   
   Users see masked data based on the execution context conditions defined in the masking policies. For more information on the execution context in Dynamic Data Masking policies, see [Advanced Column-level Security Topics](https://docs.snowflake.com/en/user-guide/security-column-advanced.html).
   
   https://docs.snowflake.com/en/user-guide/security-column-ddm-use.html
   
   ### Motivation
   
   _No response_
   
   ### Describe the solution
   
   _No response_
   
   ### Additional context
   
   _No response_
   
   ### Are you willing to submit PR?
   
   - [ ] Yes. I can submit a PR independently to improve.
   - [ ] Yes. I would be willing to submit a PR with guidance from the Kyuubi community to improve.
   - [ ] No. I cannot submit a PR at this time.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org