[Proposal] [REST] Fine Grained Access Control

[snazy]

Proposed Change

We hereby propose an interoperable interaction between Iceberg REST catalogs and query engines for the Iceberg ecosystem providing row and column level access control and data transformations (aka masking).

The interoperability aspect means that different query engines and catalogs shall be able to work seamlessly together.

High level proposal

REST API proposal

Proposal document

https://docs.google.com/document/d/108Y0E8XsZi91x-UY0_aHLEbmXDNmxmS5BnDjunEKvTM/edit?tab=t.7l861fq8jo38

Specifications

• Table
• View
• REST
• Puffin
• Encryption
• Other

[singhpk234]

Since this issue is about adding FGAC in IRC in general :

adding spec proposal too which we have been working with the community on for a while now based on community conceus :

• https://www.youtube.com/watch?v=RRyohCUDnME

SPEC PR:

• [SPEC] Add finer grained read restrictions as part of loadTable #13879

Previous Proposal ticket -

• Iceberg REST Spec Extensions for Access Decision Exchange #10395