From 5fb832b6ffe86e3c3029ff807e56842b18d53444 Mon Sep 17 00:00:00 2001 From: Travis Bowen Date: Tue, 7 Oct 2025 16:31:08 -0700 Subject: [PATCH] Update Changelog with finer grained authz --- CHANGELOG.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index a363e83d46..cfeb0f861f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -37,6 +37,8 @@ request adding CHANGELOG notes for breaking (!) changes and possibly other secti ### New Features +- Added a finer grained authorization model for UpdateTable requests. Existing privileges continue to work for granting UpdateTable, such as `TABLE_WRITE_PROPERTIES`. + However, you can now instead grant privileges just for specific operations, such as `TABLE_ADD_SNAPSHOT` - Added a Management API endpoint to reset principal credentials, controlled by the `ENABLE_CREDENTIAL_RESET` (default: true) feature flag. - The `ENABLE_SUB_CATALOG_RBAC_FOR_FEDERATED_CATALOGS` was added to support sub-catalog (initially namespace and table) RBAC for federated catalogs. The setting can be configured on a per-catalog basis by setting the catalog property: `polaris.config.enable-sub-catalog-rbac-for-federated-catalogs`.