Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SNOW-1763423: Ability to create new version of an app without permission to create schema in app package #1797

Open
sfc-gh-rzukowski opened this issue Oct 25, 2024 · 0 comments

Comments

@sfc-gh-rzukowski
Copy link

Description

In our setup we have detailed separation between users setting up new application package on provider account and users deploying new version.

We want to limit permissions required to call snow app version create to minimum. Ideally, MANAGE VERSIONS permission should be enough to create new version of the app package.

Currently, when executing snow app version create we have a query:

create schema if not exists <APP_PACKAGE>.<SCHEMA>

this schema will be used to create stage for artifacts.

Error is reported: SQL access control error: Insufficient privileges to operate on database

Both, schema and stage with artifacts already exists, we don't need to create one. We just want to reuse it.
But IF NOT EXISTS query fails because it needs permission to create schema.

Proposed solution:

  1. Check if schema and stage exists in the snowcli
  2. If schema/stage doesn't exists then attempt to create one and report error when permission is missing - otherwise continue working without permission to create schema / stage

Context

No response

@github-actions github-actions bot changed the title Ability to create new version of an app without permission to create schema in app package SNOW-1763423: Ability to create new version of an app without permission to create schema in app package Oct 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants