[ https://issues.jboss.org/browse/TEIID-5798?page=com.atlassian.jira.plugin... ] Steven Hawkins commented on TEIID-5798: --------------------------------------- Old syntax example: {code} GRANT SELECT,INSERT ON TABLE tbl CONDITION col = user() TO role; -- defaults to CONSTRAINT New: {code} GRANT SELECT,INSERT ON tbl TO role; CREATE POLICY pname ON tbl FOR SELECT,INSERT TO role USING col = user() WITH CHECK; -- effectively WITH CHECK col = user() {code} In creating a new implementation we would need to under the covers do a similar conversion - where the policy name is effectively derived. Another simplification would be to only support a single role target, rather than a role list. That would address creating another container concept for this style of grant and instead we could put the grants directly on the DataPolicyMetadata - the same would go for masks. The "mixed" from above: {code} GRANT SELECT,INSERT,UPDATE,DELETE ON tbl TO role; -- could add an ALL option CREATE POLICY pname ON tbl FOR INSERT,UPDATE,DELETE TO role USING col = user() WITH CHECK; {code} -- This message was sent by Atlassian Jira (v7.13.8#713008)