Chris Lu 4ec564469a s3tables: hide inaccessible catalog resources (#11365) ...

* s3tables: hide inaccessible table buckets

* s3tables: hide inaccessible namespaces

* s3tables: hide inaccessible tables

* s3tables: hide inaccessible resources in rename and namespace delete

RenameTable/RenameView denied on the source now report the same
not-found as a missing source, and the destination name conflict is
checked only after destination authorization so a denied caller cannot
distinguish an existing destination namespace or name from a missing
one. DeleteNamespace denials use the same formatted message as a
missing namespace.

2026-09-17 11:43:52 -07:00

..

s3tablestest

avro: field time.Time <> iceberg.date (#11091)

2026-09-02 17:24:23 -07:00

filer_ops_test.go

Report a delete the filer rejected instead of answering success (#11003)

2026-08-27 22:29:48 -07:00

filer_ops.go

Report a delete the filer rejected instead of answering success (#11003)

2026-08-27 22:29:48 -07:00

handler_bucket_create.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

handler_bucket_format_test.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

handler_bucket_get_list_delete.go

s3tables: hide inaccessible catalog resources (#11365)

2026-09-17 11:43:52 -07:00

handler_delete_decouple_test.go

s3tables: delete only the location the dropped table owns (#10986)

2026-08-27 16:28:02 -07:00

handler_existence_hiding_test.go

s3tables: hide inaccessible catalog resources (#11365)

2026-09-17 11:43:52 -07:00

handler_identity_test.go

s3tables: scope management authorization to the caller's identity (#9961)

2026-06-14 13:55:36 -07:00

handler_maintenance_test.go

s3tables: add the maintenance configuration APIs (#10773)

2026-08-16 10:36:59 -07:00

handler_maintenance.go

s3tables: add the maintenance configuration APIs (#10773)

2026-08-16 10:36:59 -07:00

handler_name_charset_test.go

s3tables: allow hyphens in namespace and table names (#10093)

2026-06-24 16:24:45 -07:00

handler_namespace_resolution_test.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

handler_namespace.go

s3tables: hide inaccessible catalog resources (#11365)

2026-09-17 11:43:52 -07:00

handler_policy.go

s3tables: scope management authorization to the caller's identity (#9961)

2026-06-14 13:55:36 -07:00

handler_rename_test.go

s3tables: hide inaccessible catalog resources (#11365)

2026-09-17 11:43:52 -07:00

handler_table_test.go

iceberg: support table register (#10067)

2026-06-23 14:07:13 -07:00

handler_table.go

s3tables: hide inaccessible catalog resources (#11365)

2026-09-17 11:43:52 -07:00

handler_update_cas_test.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

handler_view_rename_test.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

handler_view_test.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

handler_view.go

iceberg/s3tables: confine stored metadataLocation to the authorized table bucket (#11292)

2026-09-13 13:48:13 -07:00

handler.go

filer: keep empty folders that are s3tables catalog entries (#11102)

2026-09-02 11:49:08 -07:00

iam.go

s3tables: scope management authorization to the caller's identity (#9961)

2026-06-14 13:55:36 -07:00

iceberg_layout_test.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

iceberg_layout.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

iceberg_manifest_list_test.go

build(deps): bump github.com/twmb/avro from 1.7.2 to 1.8.0 (#11210)

2026-09-07 15:58:24 -07:00

iceberg_manifest_list.go

iceberg: read manifest lists that omit the Avro format version (#10475)

2026-07-28 16:42:17 -07:00

iceberg_manifest_test.go

build(deps): bump github.com/twmb/avro from 1.7.2 to 1.8.0 (#11210)

2026-09-07 15:58:24 -07:00

iceberg_manifest.go

build(deps): bump github.com/twmb/avro from 1.7.2 to 1.8.0 (#11210)

2026-09-07 15:58:24 -07:00

manager_test.go

s3tables: scope management authorization to the caller's identity (#9961)

2026-06-14 13:55:36 -07:00

manager.go

Authorize an Iceberg table create before it writes (#10991)

2026-08-27 16:23:51 -07:00

permissions_test.go

S3: Implement IAM defaults and STS signing key fallback (#8348)

2026-02-16 13:59:13 -08:00

permissions.go

s3tables: scope management authorization to the caller's identity (#9961)

2026-06-14 13:55:36 -07:00

table_data_dir_test.go

iceberg: make a table commit a compare-and-swap (#10775)

2026-08-16 12:55:42 -07:00

types.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

utils_location_test.go

iceberg/s3tables: confine stored metadataLocation to the authorized table bucket (#11292)

2026-09-13 13:48:13 -07:00

utils_namespace_test.go

iceberg: persist namespace properties for create/get (#8276)

2026-02-09 22:20:45 -08:00

utils.go

iceberg/s3tables: confine stored metadataLocation to the authorized table bucket (#11292)

2026-09-13 13:48:13 -07:00