This is an automated email from the ASF dual-hosted git repository.

yiguolei pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/doris-website.git


The following commit(s) were added to refs/heads/master by this push:
     new 70f0bb369d6 [doc](udf) update java-udf about security (#2399)
70f0bb369d6 is described below

commit 70f0bb369d60dd303aab2f61f4d3bfeb2e6d7e92
Author: zhangstar333 <[email protected]>
AuthorDate: Sat May 24 09:24:53 2025 +0800

    [doc](udf) update java-udf about security (#2399)
    
    ## Versions
    
    - [x] dev
    - [ ] 3.0
    - [ ] 2.1
    - [ ] 2.0
    
    ## Languages
    
    - [x] Chinese
    - [x] English
    
    ## Docs Checklist
    
    - [ ] Checked by AI
    - [ ] Test Cases Built
---
 docs/admin-manual/auth/security-overview.md                             | 2 ++
 .../current/admin-manual/auth/security-overview.md                      | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/docs/admin-manual/auth/security-overview.md 
b/docs/admin-manual/auth/security-overview.md
index e60ad77f241..ddd48f9c03e 100644
--- a/docs/admin-manual/auth/security-overview.md
+++ b/docs/admin-manual/auth/security-overview.md
@@ -48,3 +48,5 @@ Doris provides the following mechanisms to manage data 
security:
 
 **Fine-Grained Access Control:** Doris allows configuring data row and column 
access permissions based on rules to control user access at a granular level.
 
+**JAVA-UDF Security:** Doris supports user-defined function functionality, so 
root administrators need to review the implementation of user UDFs to ensure 
the operations in the logic are safe and prevent high-risk actions in UDFs, 
such as data deletion and system disruption.
+
diff --git 
a/i18n/zh-CN/docusaurus-plugin-content-docs/current/admin-manual/auth/security-overview.md
 
b/i18n/zh-CN/docusaurus-plugin-content-docs/current/admin-manual/auth/security-overview.md
index 0a4cb429ecc..1826262340c 100644
--- 
a/i18n/zh-CN/docusaurus-plugin-content-docs/current/admin-manual/auth/security-overview.md
+++ 
b/i18n/zh-CN/docusaurus-plugin-content-docs/current/admin-manual/auth/security-overview.md
@@ -45,3 +45,5 @@ Doris 提供以下机制管理数据安全:
 数据传输加密:Doris 支持 SSL 加密协议,确保客户端与 Doris 服务器之间的数据传输安全,防止数据在传输过程中被窃取或篡改;
 
 细粒度访问控制:Doris 中可以基于规则配置数据行/列管控用户访问权限。
+
+JAVA-UDF安全:Doris 支持用户自定义函数功能,所以需要Root 管理员审查用户 UDF 的实现,确保实现逻辑的操作安全,防止在 UDF 
中执行高危操作,例如删除数据和破坏系统等。 


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to