BigQuery has introduced a new feature, currently in preview, that enhances row-level security. Previously, users had to manually specify the values for access filtering. This feature allows the use of a lookup table in conjunction with the SESSION_USER
function to filter the values a principal should see. This change simplifies the management of row-level access security in BigQuery, even though the CREATE ROW ACCESS POLICY DDL
reference still indicates that sub-queries are not allowed.
