Are tables and views protected by row access policies compatible with the Search Optimization Service?

Master Snowflake Data Engineer Exam. Study with flashcards and multiple choice questions, each question includes hints and explanations. Prepare for your success!

Multiple Choice

Are tables and views protected by row access policies compatible with the Search Optimization Service?

Explanation:
Row access policies filter data per row based on who is querying, applying the policy predicates at read time to enforce who can see which rows. The Search Optimization Service speeds queries by using an indexed path to fetch data quickly. Those fast-path optimizations can interfere with the guaranteed, per-row security checks that row access policies require. Because the policy evaluation must be reliably enforced for every row a user might see, Snowflake does not support using the Search Optimization Service on tables or views protected by row access policies. If you rely on row-level security, avoid enabling SOS on those objects and use SOS only on data without such policies.

Row access policies filter data per row based on who is querying, applying the policy predicates at read time to enforce who can see which rows. The Search Optimization Service speeds queries by using an indexed path to fetch data quickly. Those fast-path optimizations can interfere with the guaranteed, per-row security checks that row access policies require. Because the policy evaluation must be reliably enforced for every row a user might see, Snowflake does not support using the Search Optimization Service on tables or views protected by row access policies. If you rely on row-level security, avoid enabling SOS on those objects and use SOS only on data without such policies.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy