Apache Iceberg™ tables: Table owner must have USAGE privilege on the external volume (Pending)¶

Performing DML or DDL operations on Apache Iceberg™ tables requires USAGE privilege on the associated external volume. The behavior changes as follows:

Before the change:

Either the executing user or the table owner could have USAGE privilege on the external volume to perform DML or DDL operations on an Iceberg table.

After the change:

The table owner must always have USAGE privilege on the external volume to perform DML or DDL operations on an Iceberg table. It is no longer sufficient for only the executing user to hold this privilege.

This change is being made to ensure consistent behavior across all access mechanisms (including catalog-linked databases and Horizon) and to align with the expected privilege model for Iceberg tables.

Ref: 2247