Repository navigation
Add row-policy DDL and inspection support - #335
Open
sharadgaur wants to merge 1 commit into
Open
sharadgaur wants to merge 1 commit into
sharadgaur wants to merge 1 commit into
Conversation
sharadgaur
force-pushed
the
sharad/row-policy-ddl
branch
from
October 23, 2026 19:12
7e9749b to
9720786
Compare
git-hulk
self-requested a review
October 24, 2026 01:27
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Add parsing, formatting and AST traversal support for row-policy statements:
CREATE,ALTERandDROP [ROW] POLICYSHOW CREATE [ROW] POLICYandSHOW [ROW] POLICIESHandles policy/table bindings, conditions, policy modes, user/role sets, access storage and cluster clauses. Preserves the difference between omitted ALTER clauses and explicit changes such as
USING NONEorTO NONE.Example
Compatibility
Adds policy visit methods to
ASTVisitor;DefaultASTVisitorprovides their default implementations.Supports SELECT policy syntax. Parsing does not execute policies or provide access-control enforcement. Also fixes numeric tuple-access token separation found during roundtrip testing.
Tests
Includes AST and formatting fixtures, roundtrip tests, traversal checks, malformed-input coverage and fuzz regressions. Validated with the unit, race and compatibility suites, native ClickHouse formatter comparisons and bounded fuzzing.