Starburst Documentation
Starburst Galaxy
  •  Get started
  •  Working with data
  •  Developer tools
  • Starburst Galaxy UI
  •  Catalogs
  •  Clusters
  •  Admin
  •  Access control
  •  Cloud settings
  • Administration
  •  Security
  •  Single sign-on
  •  Troubleshooting
  • Galaxy status
  •  Reference

    • starburst galaxy > access control > Row filters

    Row filters #

    Starburst Galaxy’s row filters let you control what rows returned by a query a user is entitled to see. A row filter can be added to a policy whose target is a table or view. Row filters are created in the Row filters pane.

    See row-level filters for more details.

    Row filters pane #

    Use the Row filters pane to view the list of row filters and their properties, as well as to create, edit, and delete row filters.

    The Row filters navigation menu link is only visible to users whose active role set includes the MANAGE_SECURITY account privilege.

    View row filters #

    The Row filters pane lets you view a list of your row filters including useful information such a description, use count, and ownership.

    Use the Search row filters field to find filters that match your search term. For example, you can search accountadmin to find row filters owned by the accountadmin role.

    The following columns are displayed:

    • Row filter name: The name given to the row filter.
    • Filter expression: The filter’s SQL matching expression.
    • Use count: The number of policies the filter is used in.
    • Comment: The description given to the filter.
    • Owning role: The role that owns the filter.
    • Created: The timestamp when the filter was created.

    • Last updated: The timestamp when the filter was last updated.

    To reorder the row filter view, click a column name to sort by that column. Click the column name again to reverse the sort order.

    Create row filters #

    To create a row filter:

    1. Click Create row filter.
    2. Enter the filter’s name in the Name field.
    3. Enter a description for the filter in the Description field.

    4. Enter an expression for the filter in the Filter expression field. The expression is the condition that determines what rows to exclude from the query’s result set. This condition must be a SQL expression that returns a boolean value on applicable rows, where rows are excluded if this condition returns true.

      For example, an expression to exclude rows in the nation table with the name value of UNITED KINGDOM:

       nationkey=(SELECT nationkey FROM nation WHERE name = `UNITED KINGDOM`)
    5. Click Create row filter.

    create a row filter

    Edit row filters #

    To edit a row filter’s settings:

    1. Click the ( ) options menu on the row filters list.
    2. Select Edit row filter settings.
    3. Make your changes to the Name, Description, and Filter expression fields.
    4. Click Save changes.

    edit a row filter

    To change the row filter’s owner:

    1. Click the ( ) options menu on the row filters list.
    2. Select Change owner.
    3. Select a new owner in the New owner drop-down menu.
    4. Click Change owner.
    5. Click Change in the confirmation dialog.

    Change the owner of a row filter

    Delete row filters #

    To delete a row filter:

    1. Click the ( ) options menu on the row filters list.
    2. Click Delete row filter.
    3. Click Yes, delete in the confirmation window.

    Delete a row filter

    Deleting a row filter cannot be undone.

    Apply row filters to policies #

    Row filters are applied to policies upon policy creation or when editing a policy.

    See Access control > Roles and privileges for more information.