Error in Viewing the Table

[vamsi_simbus]

Facing below error while accessing a table with mutiple row filters but i am not able to delete the row filter using SQL query. Please help

Failed to request /ajax-api/2.1/unity-catalog/tables/product_return_prediction_dev.bronze.customers_data?include_browse=true: 400 Evaluation of ABAC policies on 'product_return_prediction_dev.bronze.customers_data' resulted in multiple row filters. At most one row filter is allowed.

[pranaav93]

Hi What happens when you remove the row filter? Are you using drop or alter table?

Make sure you have access to the catalog , schema and table plus permissions to manage row filters on unity catalog!

[szymon_dybczak]

Hi @vamsi_simbus ,

This is due to following beta limitation of ABAC. 

Unity Catalog attribute-based access control (ABAC) | Databricks on AWS

To make it work you need to remove additional rows filters using i.e following clause:

ALTER TABLE <table_name> DROP ROW FILTER;

[vamsi_simbus]

yes @szymon_dybczak  , I tried that command but is is failing with below error.

[pranaav93]

Did you try deleting the policy? 

https://docs.databricks.com/aws/en/data-governance/unity-catalog/abac/policies?language=Catalog%C2%A... 

[vamsi_simbus]

@pranaav93 , unable to view table to delete the policy

[szymon_dybczak · Accepted solution]

Hi @vamsi_simbus ,

Try to use rest api to delete policy. Once you do that, delete additional row filters and once again create ABAC policy.

Delete an ABAC policy | ABAC Policies API | REST API reference | Databricks on AWS

Or try to drop it using SQL;

DROP POLICY <policy_name> ON <securable_type> <securable_name>

If you can't - ask your admin to execute above command for you 

[vamsi_simbus]

Hi @pranaav93  @szymon_dybczak 

below query worked for me

"DROP POLICY city_filter_policy ON product_return_prediction_dev.bronze.customers_data"

[szymon_dybczak]

Great news, now if you want to use ABAC once again you need to delete additional filter rows. Currently supports only 1 filter as I showed you in my reply above.