Adding Iceberg connector settings with glue catalog, causes queries to columns table in system.jdbc to fail

[kuripart]

Iceberg settings:

connector.name=iceberg
iceberg.catalog.type=glue

Error details:

trino:jdbc> describe columns;
       Column       |  Type   | Extra | Comment 
--------------------+---------+-------+---------
 table_cat          | varchar |       |         
 table_schem        | varchar |       |         
 table_name         | varchar |       |         
 column_name        | varchar |       |         
 data_type          | bigint  |       |         
 type_name          | varchar |       |         
 column_size        | bigint  |       |         
 buffer_length      | bigint  |       |         
 decimal_digits     | bigint  |       |         
 num_prec_radix     | bigint  |       |         
 nullable           | bigint  |       |         
 remarks            | varchar |       |         
 column_def         | varchar |       |         
 sql_data_type      | bigint  |       |         
 sql_datetime_sub   | bigint  |       |         
 char_octet_length  | bigint  |       |         
 ordinal_position   | bigint  |       |         
 is_nullable        | varchar |       |         
 scope_catalog      | varchar |       |         
 scope_schema       | varchar |       |         
 scope_table        | varchar |       |         
 source_data_type   | bigint  |       |         
 is_autoincrement   | varchar |       |         
 is_generatedcolumn | varchar |       |         
(24 rows)

Query 20230125_185308_00305_jsais, FINISHED, 2 nodes
Splits: 7 total, 7 done (100.00%)
0.28 [24 rows, 1.39KB] [86 rows/s, 5KB/s]

trino:jdbc> select table_cat from columns limit 1;

Query 20230125_190916_00337_jsais, FAILED, 2 nodes
Splits: 6 total, 0 done (0.00%)
31:49 [0 rows, 0B] [0 rows/s, 0B/s]

Query 20230125_190916_00337_jsais failed: Insufficient Lake Formation permission(s) on columns (Service: AWSGlue; Status Code: 400; Error Code: AccessDeniedException; Request ID: 937b0302-aeb9-4b38-ba64-98593ef7c943; Proxy: null)

Full traceback:

com.amazonaws.services.glue.model.AccessDeniedException: Insufficient Lake Formation permission(s) on columns (Service: AWSGlue; Status Code: 400; Error Code: AccessDeniedException; Request ID: 937b0302-aeb9-4b38-ba64-98593ef7c943; Proxy: null)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.handleErrorResponse(AmazonHttpClient.java:1879)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.handleServiceErrorResponse(AmazonHttpClient.java:1418)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeOneRequest(AmazonHttpClient.java:1387)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeHelper(AmazonHttpClient.java:1157)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.doExecute(AmazonHttpClient.java:814)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeWithTimer(AmazonHttpClient.java:781)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.execute(AmazonHttpClient.java:755)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.access$500(AmazonHttpClient.java:715)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutionBuilderImpl.execute(AmazonHttpClient.java:697)
	at com.amazonaws.http.AmazonHttpClient.execute(AmazonHttpClient.java:561)
	at com.amazonaws.http.AmazonHttpClient.execute(AmazonHttpClient.java:541)
	at com.amazonaws.services.glue.AWSGlueClient.doInvoke(AWSGlueClient.java:12473)
	at com.amazonaws.services.glue.AWSGlueClient.invoke(AWSGlueClient.java:12440)
	at com.amazonaws.services.glue.AWSGlueClient.invoke(AWSGlueClient.java:12429)
	at com.amazonaws.services.glue.AWSGlueClient.executeGetTable(AWSGlueClient.java:7308)
	at com.amazonaws.services.glue.AWSGlueClient.getTable(AWSGlueClient.java:7277)
	at io.trino.plugin.iceberg.catalog.glue.TrinoGlueCatalog.lambda$getTable$10(TrinoGlueCatalog.java:421)
	at io.trino.plugin.hive.aws.AwsApiCallStats.call(AwsApiCallStats.java:37)
	at io.trino.plugin.iceberg.catalog.glue.TrinoGlueCatalog.getTable(TrinoGlueCatalog.java:420)
	at io.trino.plugin.iceberg.catalog.glue.TrinoGlueCatalog.getView(TrinoGlueCatalog.java:685)
	at io.trino.plugin.iceberg.IcebergMetadata.getView(IcebergMetadata.java:2060)
	at io.trino.plugin.base.classloader.ClassLoaderSafeConnectorMetadata.getView(ClassLoaderSafeConnectorMetadata.java:621)
	at io.trino.metadata.MetadataManager.getViews(MetadataManager.java:1149)
	at io.trino.metadata.MetadataManager.listTableColumns(MetadataManager.java:566)
	at io.trino.metadata.MetadataListing.listTableColumns(MetadataListing.java:164)
	at io.trino.connector.system.jdbc.ColumnJdbcTable.cursor(ColumnJdbcTable.java:283)
	at io.trino.connector.system.SystemPageSourceProvider$1.cursor(SystemPageSourceProvider.java:129)
	at io.trino.split.MappedRecordSet.cursor(MappedRecordSet.java:53)
	at io.trino.spi.connector.RecordPageSource.<init>(RecordPageSource.java:37)
	at io.trino.connector.system.SystemPageSourceProvider.createPageSource(SystemPageSourceProvider.java:108)
	at io.trino.split.PageSourceManager.createPageSource(PageSourceManager.java:62)
	at io.trino.operator.ScanFilterAndProjectOperator$SplitToPages.process(ScanFilterAndProjectOperator.java:279)
	at io.trino.operator.ScanFilterAndProjectOperator$SplitToPages.process(ScanFilterAndProjectOperator.java:207)
	at io.trino.operator.WorkProcessorUtils$3.process(WorkProcessorUtils.java:338)
	at io.trino.operator.WorkProcessorUtils$ProcessWorkProcessor.process(WorkProcessorUtils.java:391)
	at io.trino.operator.WorkProcessorUtils$3.process(WorkProcessorUtils.java:325)
	at io.trino.operator.WorkProcessorUtils$ProcessWorkProcessor.process(WorkProcessorUtils.java:391)
	at io.trino.operator.WorkProcessorUtils$3.process(WorkProcessorUtils.java:325)
	at io.trino.operator.WorkProcessorUtils$ProcessWorkProcessor.process(WorkProcessorUtils.java:391)
	at io.trino.operator.WorkProcessorUtils.getNextState(WorkProcessorUtils.java:240)
	at io.trino.operator.WorkProcessorUtils.lambda$processStateMonitor$3(WorkProcessorUtils.java:219)
	at io.trino.operator.WorkProcessorUtils$ProcessWorkProcessor.process(WorkProcessorUtils.java:391)
	at io.trino.operator.WorkProcessorUtils.getNextState(WorkProcessorUtils.java:240)
	at io.trino.operator.WorkProcessorUtils.lambda$finishWhen$4(WorkProcessorUtils.java:234)
	at io.trino.operator.WorkProcessorUtils$ProcessWorkProcessor.process(WorkProcessorUtils.java:391)
	at io.trino.operator.WorkProcessorSourceOperatorAdapter.getOutput(WorkProcessorSourceOperatorAdapter.java:150)
	at io.trino.operator.Driver.processInternal(Driver.java:411)
	at io.trino.operator.Driver.lambda$process$10(Driver.java:314)
	at io.trino.operator.Driver.tryWithLock(Driver.java:706)
	at io.trino.operator.Driver.process(Driver.java:306)
	at io.trino.operator.Driver.processForDuration(Driver.java:277)
	at io.trino.execution.SqlTaskExecution$DriverSplitRunner.processFor(SqlTaskExecution.java:752)
	at io.trino.execution.executor.PrioritizedSplitRunner.process(PrioritizedSplitRunner.java:164)
	at io.trino.execution.executor.TaskExecutor$TaskRunner.run(TaskExecutor.java:519)
	at io.trino.$gen.Trino_405____20230125_170827_2.run(Unknown Source)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
	at java.base/java.lang.Thread.run(Thread.java:833)

NOTE:

This issue is localized to the columns table, ie; table_name=columns, we are able to fetch column names for all other tables.

Eg:

This will fail:

SELECT TABLE_CAT, TABLE_SCHEM, TABLE_NAME, COLUMN_NAME, DATA_TYPE,
  TYPE_NAME, COLUMN_SIZE, BUFFER_LENGTH, DECIMAL_DIGITS, NUM_PREC_RADIX,
  NULLABLE, REMARKS, COLUMN_DEF, SQL_DATA_TYPE, SQL_DATETIME_SUB,
  CHAR_OCTET_LENGTH, ORDINAL_POSITION, IS_NULLABLE,
  SCOPE_CATALOG, SCOPE_SCHEMA, SCOPE_TABLE,
  SOURCE_DATA_TYPE, IS_AUTOINCREMENT, IS_GENERATEDCOLUMN
FROM system.jdbc.columns
WHERE TABLE_NAME LIKE '%columns%'
ORDER BY TABLE_CAT, TABLE_SCHEM, TABLE_NAME, ORDINAL_POSITION

Substituting with any other TABLE_NAME will be fine.