New Webinar: Govern roles, shares, and data movement in Snowflake

Learn how to govern Snowflake roles, shares, and data movement without slowing delivery. Join our live webinar on controlling drift, permissions, and audit readiness.

OnlySpecificSchemasAllowed

Last updated: September 2, 2025

The OnlySpecificSchemasAllowed custom policy check allows you to filter what specific schemas are allowed.

In this example we are only allowing schemas titled lion or eagle.

PATTERN_A regex: (?is)(?=create|drop|alter|insert|select|delete)

PATTERN_B regex: (?is)(?:lion|eagle)\.

Before you begin

Scope

Database

changelog

Relational

  • Liquibase 4.29.0+

  • Python 3.10.14+

  • Configure a valid Liquibase Pro license key

  • Create a Check Settings file

  • Ensure the Liquibase Checks extension is installed. In Liquibase 4.31.0+, it is already installed in the /liquibase/internal/lib directory, so no action is needed.

  • If the checks JAR is not installed, download liquibase-checks-<version>.jar and put it in the liquibase/lib directory.

    • Maven users only:

      Add this dependency to your pom.xml

      file: <dependency> <groupId>org.liquibase.ext</groupId> <artifactId>liquibase-checks</artifactId> <version>2.0.0</version> </dependency>

  • Java Development Kit 17+ (available for Open JDK and Oracle JDK)

  • Linux, macOS, or Windows operating system

Procedure

These steps describe how to create the Custom Policy Check. It does not exist by default in Liquibase Pro.

1

Run this command in the CLI:

loading
2

Give your check a short name for easy identification

Use up to 64 alpha-numeric characters only.

In this example we will use:
loading
3

Set the Severity to return a code of 0-4 when triggered.

These severity codes allow you to determine if the job moves forward or stops when this check triggers. Learn more here: Use Policy Checks in Automation: Severity and Exit Code options: 'INFO'=0, 'MINOR'=1, 'MAJOR'=2, 'CRITICAL'=3, 'BLOCKER'=4

4

Set 'PATTERN_A' to this valid regular expression:

In this example we will use:
loading
5

Set 'PATTERN_B' to this valid regular expression:

loading
6

Set 'CASE_SENSITIVE' to true or false depending on how narrow you want your search to be.

In this example, we will set it to false.

7

Set the SEARCH_STRING to this valid regular expression:

loading
8

Set the MESSAGE for when a match for regular expression <SEARCH_STRING> is found in a Changeset:

In this example we will use:
loading
9

Set STRIP_COMMENTS to true if you want to remove the comments from the output.