FreeOnePlus opened a new pull request, #211:
URL: https://github.com/apache/doris-mcp-server/pull/211

   ## Summary
   
   - align `doris_cluster.list_active_tasks` capability detection with the 
runtime's existing read-only fallback chain
   - expose the child when either the active-query view or process list is 
readable even if `SHOW PROC \"/current_queries\"` is denied
   - narrow the public `task_types` schema and description to the query and 
compaction task types actually implemented
   
   ## Root cause
   
   The capability detector checked only `SHOW PROC \"/current_queries\"`, while 
the execution runtime already fell back to `information_schema.active_queries` 
and `SHOW FULL PROCESSLIST`. Restricted Doris accounts could therefore execute 
a safe fallback but never discover or call the child because availability was 
rejected first.
   
   ## User impact
   
   Read-only enterprise identities can now use active-query inspection without 
receiving broader administrative privileges. Load and schema-change status 
remain in the pipeline domain instead of being overstated by the cluster task 
contract.
   
   ## Validation
   
   - `uv lock --check`
   - `uv run --frozen python generate_tool_catalog.py --check`
   - `uv run --frozen ruff check .`
   - `uv run --frozen mypy doris_mcp_server`
   - `uv run --frozen bandit -q -c pyproject.toml -r doris_mcp_server 
doris_mcp_client generate_requirements.py generate_tool_catalog.py`
   - `uv run --frozen pytest -q -W error` (`1827 passed, 85 skipped`, coverage 
`67.98%`)
   
   The real Doris 4.0.5 restricted-reader case that exposed this mismatch will 
be repeated against the exact committed candidate before downstream acceptance.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to