This is an automated email from the ASF dual-hosted git repository.
yiguolei pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/doris-website.git
The following commit(s) were added to refs/heads/master by this push:
new 70f0bb369d6 [doc](udf) update java-udf about security (#2399)
70f0bb369d6 is described below
commit 70f0bb369d60dd303aab2f61f4d3bfeb2e6d7e92
Author: zhangstar333 <[email protected]>
AuthorDate: Sat May 24 09:24:53 2025 +0800
[doc](udf) update java-udf about security (#2399)
## Versions
- [x] dev
- [ ] 3.0
- [ ] 2.1
- [ ] 2.0
## Languages
- [x] Chinese
- [x] English
## Docs Checklist
- [ ] Checked by AI
- [ ] Test Cases Built
---
docs/admin-manual/auth/security-overview.md | 2 ++
.../current/admin-manual/auth/security-overview.md | 2 ++
2 files changed, 4 insertions(+)
diff --git a/docs/admin-manual/auth/security-overview.md
b/docs/admin-manual/auth/security-overview.md
index e60ad77f241..ddd48f9c03e 100644
--- a/docs/admin-manual/auth/security-overview.md
+++ b/docs/admin-manual/auth/security-overview.md
@@ -48,3 +48,5 @@ Doris provides the following mechanisms to manage data
security:
**Fine-Grained Access Control:** Doris allows configuring data row and column
access permissions based on rules to control user access at a granular level.
+**JAVA-UDF Security:** Doris supports user-defined function functionality, so
root administrators need to review the implementation of user UDFs to ensure
the operations in the logic are safe and prevent high-risk actions in UDFs,
such as data deletion and system disruption.
+
diff --git
a/i18n/zh-CN/docusaurus-plugin-content-docs/current/admin-manual/auth/security-overview.md
b/i18n/zh-CN/docusaurus-plugin-content-docs/current/admin-manual/auth/security-overview.md
index 0a4cb429ecc..1826262340c 100644
---
a/i18n/zh-CN/docusaurus-plugin-content-docs/current/admin-manual/auth/security-overview.md
+++
b/i18n/zh-CN/docusaurus-plugin-content-docs/current/admin-manual/auth/security-overview.md
@@ -45,3 +45,5 @@ Doris 提供以下机制管理数据安全:
数据传输加密:Doris 支持 SSL 加密协议,确保客户端与 Doris 服务器之间的数据传输安全,防止数据在传输过程中被窃取或篡改;
细粒度访问控制:Doris 中可以基于规则配置数据行/列管控用户访问权限。
+
+JAVA-UDF安全:Doris 支持用户自定义函数功能,所以需要Root 管理员审查用户 UDF 的实现,确保实现逻辑的操作安全,防止在 UDF
中执行高危操作,例如删除数据和破坏系统等。
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]