Get user Lake Formation data permissions on a dataset

GET 
/datasets/:id/users/:userid/data-permissions

Returns fine-grained Lake Formation column/row permissions for the path userid on the dataset. LF (TargetLocation=lf) datasets only (else IPV-1058). Response is UserDataPermissions with TablePermissions[] and DataFilterPermissions[]. Each permission entry includes Columns, ColumnCondition (Include|Exclude), and for data filters optional Rows and Name. Dataset must exist, be active, and registration completed; path userid must have access to the dataset. Query params limit/offset/sortby/sortorder/projectionExpression are accepted by API Gateway but not applied by the handler (full permission set returned). Safe to retry (read-only).

Request

Responses

200

User Lake Formation permissions returned. Body is UserDataPermissions with TablePermissions and DataFilterPermissions arrays (either may be empty).

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

400

Validation or authorization failure. Body is {"Message": " - "}. Codes: IPV-1002 (dataset not found), DS-1002 (inactive dataset), AUTH-1011 (path userid has no dataset access), IPV-1058 (non-LF dataset / fine-grained column permissions unsupported).

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

500

Backend/generic failure. Body is {"Message": " - "}.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers