Fix(snowflake): parse GET_DDL #unknown_policy in ROW ACCESS POLICY [CLAUDE] (#7491)

* Fix(snowflake): parse GET_DDL #unknown_policy in ROW ACCESS POLICY

Snowflake's GET_DDL outputs `#unknown_policy` (without ON clause) when
the user lacks privileges to see the actual policy name. Handle the `#`
token prefix in the parser and ensure it is never quoted in output.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Fix: ruff-format and mypy type errors

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Fix: use X | None instead of t.Optional[X] per ruff UP007

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Fix: use Var instead of Identifier for #unknown_policy to avoid quoting

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Fix: simplify #unknown_policy parsing to use _parse_var directly

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: eakmanrq

sqlglot/generators/snowflake.py

@@ -863,7 +863,7 @@ def show_sql(self, expression: exp.Show) -> str:
     def rowaccessproperty_sql(self, expression: exp.RowAccessProperty) -> str:
         if not expression.this:
             return "ROW ACCESS"
-        on = f" ON ({self.expressions(expression, flat=True)})"
+        on = f" ON ({self.expressions(expression, flat=True)})" if expression.expressions else ""
         return f"WITH ROW ACCESS POLICY {self.sql(expression, 'this')}{on}"
 
     def describe_sql(self, expression: exp.Describe) -> str:

sqlglot/parsers/snowflake.py

@@ -978,15 +978,21 @@ def _parse_with_property(self) -> exp.Expr | None | list[exp.Expr]:
         return super()._parse_with_property()
 
     def _parse_row_access_policy(self) -> exp.RowAccessProperty:
-        policy = self._parse_column()
-        if not self._match(TokenType.ON):
-            self.raise_error("Expected ON after ROW ACCESS POLICY name")
-        return self.expression(
-            exp.RowAccessProperty(
-                this=policy.to_dot() if isinstance(policy, exp.Column) else policy,
-                expressions=self._parse_wrapped_csv(self._parse_id_var),
-            )
-        )
+        # GET_DDL outputs #unknown_policy when the user lacks privileges to see the policy name
+        if self._match(TokenType.HASH):
+            policy: exp.Expr | None = self._parse_var(any_token=True)
+            if policy:
+                policy = exp.Var(this=f"#{policy.name}")
+            expressions = None
+        else:
+            policy = self._parse_column()
+            if isinstance(policy, exp.Column):
+                policy = policy.to_dot()
+            if not self._match(TokenType.ON):
+                self.raise_error("Expected ON after ROW ACCESS POLICY name")
+            expressions = self._parse_wrapped_csv(self._parse_id_var)
+
+        return self.expression(exp.RowAccessProperty(this=policy, expressions=expressions))
 
     def _parse_create(self) -> exp.Create | exp.Command:
         expression = super()._parse_create()

tests/dialects/test_snowflake.py

@@ -5973,6 +5973,16 @@ def test_create_view_row_access_policy(self):
                 "CREATE VIEW v WITH ROW ACCESS POLICY p AS SELECT 1",
                 dialect="snowflake",
             )
+        self.validate_identity(
+            "CREATE VIEW v WITH ROW ACCESS POLICY #unknown_policy AS SELECT 1",
+        )
+        self.assertEqual(
+            parse_one(
+                "CREATE VIEW v WITH ROW ACCESS POLICY #unknown_policy AS SELECT 1",
+                dialect="snowflake",
+            ).sql(dialect="snowflake", identify=True),
+            'CREATE VIEW "v" WITH ROW ACCESS POLICY #unknown_policy AS SELECT 1',
+        )
 
     def test_semantic_view(self):
         for dimensions, metrics, where, facts in [