Information Schema views: Now honor MANAGE GRANTS privilege, caller grants, and inherited grants (Pending)¶

Information Schema views now correctly evaluate all applicable privileges when determining which objects are visible, including the MANAGE GRANTS global privilege, caller grants, and inherited grants.

Before the change:

Information Schema views did not honor the MANAGE GRANTS privilege when determining object visibility. In addition, caller grants and inherited grants were not considered. As a result, a role with MANAGE GRANTS could see fewer objects in Information Schema views than when running an equivalent SHOW command. The Snowflake documentation acknowledged this limitation with the following note on several Information Schema view pages:

The view does not honor the MANAGE GRANTS privilege and consequently may show less information compared to a SHOW command when both are executed with a role that was granted the MANAGE GRANTS privilege.

After the change:

Information Schema views now evaluate all applicable privileges, including MANAGE GRANTS, caller grants, and inherited grants. The set of objects returned by an Information Schema view now matches the output of an equivalent SHOW command executed with the same role.

This change corrects a product flaw and aligns Information Schema view behavior with the documented access control model.

Ref: 2416