[RESOURCE] databricks_sql_permissions to manage data object access control lists

.lgtm.yml

@@ -0,0 +1,10 @@
+
+extraction:
+  javascript:
+    index:
+      exclude: 
+        - "*"
+  python:
+    index:
+      exclude: 
+        - "*"

README.md

@@ -46,6 +46,7 @@
 | [databricks_secret_scope](docs/resources/secret_scope.md)
 | [databricks_sql_endpoint](docs/resources/sql_endpoint.md)
 | [databricks_spark_version](docs/data-sources/spark_version.md) data
+| [databricks_sql_permissions](docs/resources/sql_permissions.md)
 | [databricks_token](docs/resources/token.md)
 | [databricks_user](docs/resources/user.md)
 | [databricks_user_instance_profile](docs/resources/user_instance_profile.md)

access/acceptance/sql_permissions_test.go

@@ -0,0 +1,57 @@
+package acceptance
+
+import (
+	"context"
+	"fmt"
+	"os"
+	"testing"
+
+	"github.com/databrickslabs/terraform-provider-databricks/common"
+	"github.com/databrickslabs/terraform-provider-databricks/compute"
+	"github.com/databrickslabs/terraform-provider-databricks/internal/acceptance"
+	"github.com/databrickslabs/terraform-provider-databricks/qa"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func TestAccTableACL(t *testing.T) {
+	cloudEnv := os.Getenv("CLOUD_ENV")
+	if cloudEnv == "" {
+		t.Skip("Acceptance tests skipped unless env 'CLOUD_ENV' is set")
+	}
+
+	client := common.CommonEnvironmentClient()
+	client.WithCommandExecutor(func(ctx context.Context,
+		dc *common.DatabricksClient) common.CommandExecutor {
+		return compute.NewCommandsAPI(ctx, dc)
+	})
+
+	shell := client.CommandExecutor(context.Background())
+	clusterInfo := compute.NewTinyClusterInCommonPoolPossiblyReused()
+	talbeName := qa.RandomName("table_acl_")
+
+	cr := shell.Execute(clusterInfo.ClusterID, "python",
+		fmt.Sprintf("spark.range(10).write.saveAsTable('%s')",
+			talbeName))
+	require.False(t, cr.Failed(), cr.Error())
+	os.Setenv("TABLE_ACL_TEST_TABLE", talbeName)
+	defer func() {
+		cr := shell.Execute(clusterInfo.ClusterID, "sql",
+			fmt.Sprintf("DROP TABLE %s", talbeName))
+		assert.False(t, cr.Failed(), cr.Error())
+	}()
+
+	acceptance.Test(t, []acceptance.Step{
+		{
+			Template: `
+			resource "databricks_sql_permissions" "this" {
+				table = "{env.TABLE_ACL_TEST_TABLE}"
+
+				privilege_assignments {
+					principal = "users"
+					privileges = ["SELECT"]
+				}
+			}`,
+		},
+	})
+}