You're about to rename a column. Five minutes of work. Someone asks the obvious question first: who does this break?
In a healthy Snowflake account, that's a query. In most accounts, it isn't. Someone runs SHOW GRANTS ON TABLE, gets a list of roles, and hits the real problem: those roles nest inside other roles, which nest inside more roles, and nobody can say with confidence where the chain ends. So the change waits. Or it ships anyway, because the maintenance window doesn't care about your archaeology project.
This article has been indexed from DZone Security Zone
Read the original article: