Object owners (i.e. the role that has the OWNERSHIP privilege on the object) do not have the privilege to unset masking policies.
Object owners cannot view column data in which a masking policy applies.
https://docs.snowflake.com/en/user-guide/security-column-intro.html#what-are-masking-policies
The question here is Will the developer be able to modify the table to read the masked data?
It is about modifying the table to read the data from masked column.
Owner of the table can definitely UNSET the masking policy by using this command
ALTER TABLE <name> modify column <col_name> unset masking policy;
OWNERSHIP
Grants full control over the masking policy. Required to alter most properties of a masking policy. Only a single role can hold this privilege on a specific object at a time.
Object owners (i.e. the role that has the OWNERSHIP privilege on the object) do not have the privilege to unset masking policies.
Object owners cannot view column data in which a masking policy applies.
https://docs.snowflake.com/en/user-guide/security-column-intro.html#what-are-masking-policies
upvoted 3 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
miadiesel
Highly Voted 1 year, 11 months agod22770a
Most Recent 1 month, 1 week ago_yyukta
8 months, 3 weeks ago[Removed]
1 year agoAlexbDku
1 year, 10 months agohalol
1 year, 11 months ago