as part of the work on this issue, create an integration test for any file & anonymous function grants like https://github.com/databrickslabs/ucx/blob/main/tests/integration/workspace_access/test_tacl.py#L12-L54 and make any necessary code modifications.

# https://github.com/databrickslabs/ucx/issues/623
def test_issue_623(sql_backend, inventory_schema, make_group):
    group_a = make_group()
    group_b = make_group()

    sql_backend.execute(f"GRANT READ_METADATA ON ANY FILE TO `{group_a.display_name}`")

    tables = StaticTablesCrawler(sql_backend, inventory_schema, [])
    grants = GrantsCrawler(tables)

    tacl_support = TableAclSupport(grants, sql_backend)

    migration_state = MigrationState([MigratedGroup.partial_info(group_a, group_b)])
    for crawler_task in tacl_support.get_crawler_tasks():
        permission = crawler_task()
        apply_task = tacl_support.get_apply_task(permission, migration_state)
        if not apply_task:
            continue
        apply_task()

    actual = {}
    for any_file_grant in grants._grants(any_file=True):
        actual[any_file_grant.principal] = any_file_grant.action_type

    assert group_b.display_name in actual

Any file and anonymous function grants are not being captured #623

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions