apache / apache/arrow

[C++][Python] AzureFileSystem can't use GetProperties with User Delegation SAS tokens

Open
#50,073 7 comments 0 reactions 0 assignees View on GitHub
Component: C++ Component: Python Type: bug
Dominant language
C++
Stars
17.1k
Forks
4.3k
Avg merge
3d 13h
Merged PRs (30d)
88

Description

### Describe the bug, including details regarding any error messages, version, and platform.

Can't we substitute all GetProperties calls with the equivalent of pyarrow's get_file_info?

An Azure Storage 403 Forbidden error during a GetProperties (or GetContainerPropertiesAsFileInfo) call using a User Delegation SAS token occurs because User Delegation SAS tokens lack account-level service permissions by design. They cannot evaluate account or container-level metadata properties if the token scope is restricted to specific blobs.

Image

Existing issue with a different proposed fix: https://github.com/apache/arrow/issues/46085

### Component(s)

C++, Python

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.