Skip to content

Commit

Permalink
Change sensitiveness of name and login_name
Browse files Browse the repository at this point in the history
References: #2662 #2668
  • Loading branch information
sfc-gh-asawicki committed Aug 23, 2024
1 parent 40a3e6f commit 2803c0d
Show file tree
Hide file tree
Showing 2 changed files with 8 additions and 2 deletions.
6 changes: 6 additions & 0 deletions MIGRATION_GUIDE.md
Original file line number Diff line number Diff line change
Expand Up @@ -142,6 +142,12 @@ The following set of [parameters](https://docs.snowflake.com/en/sql-reference/pa
- [NETWORK_POLICY](https://docs.snowflake.com/en/sql-reference/parameters#network-policy)
- [PREVENT_UNLOAD_TO_INTERNAL_STAGES](https://docs.snowflake.com/en/sql-reference/parameters#prevent-unload-to-internal-stages)

### *(breaking change)* Changes in sensitiveness of name and login_name

According to https://docs.snowflake.com/en/sql-reference/functions/all_user_names#usage-notes, `NAME`s are not considered sensitive data and `LOGIN_NAME`s are. Previous versions of the provider had this the other way around. In this version, `name` attribute was unmarked as sensitive, whereas `login_name` was marked as sensitive. This may break your configuration if you were using `login_name`s before e.g. in a `for_each` loop.

Connected issues: [#2662](https://github.com/Snowflake-Labs/terraform-provider-snowflake/issues/2662), [#2668](https://github.com/Snowflake-Labs/terraform-provider-snowflake/issues/2668).

## v0.94.0 ➞ v0.94.1
### changes in snowflake_schema

Expand Down
4 changes: 2 additions & 2 deletions pkg/resources/user.go
Original file line number Diff line number Diff line change
Expand Up @@ -20,14 +20,14 @@ var userSchema = map[string]*schema.Schema{
"name": {
Type: schema.TypeString,
Required: true,
Sensitive: true,
Sensitive: false,
Description: "Name of the user. Note that if you do not supply login_name this will be used as login_name. [doc](https://docs.snowflake.net/manuals/sql-reference/sql/create-user.html#required-parameters)",
},
"login_name": {
Type: schema.TypeString,
Optional: true,
Computed: true,
Sensitive: false,
Sensitive: true,
Description: "The name users use to log in. If not supplied, snowflake will use name instead.",
// login_name is case-insensitive
DiffSuppressFunc: ignoreCaseSuppressFunc,
Expand Down

0 comments on commit 2803c0d

Please sign in to comment.