clintropolis opened a new pull request, #18741: URL: https://github.com/apache/druid/pull/18741
### Description Fixes an issue with MSQ compaction tasks can fail if a policy enforcer is enabled, since compaction generates MSQ tasks directly instead of going through the broker, it would miss out on decorating the `DataSource` as a restricted datasource with the policy set. To fix, `MSQCompactionRunner` now uses an escalator to create an auth result and uses the policy from that to decorate the query it generates. To test, I hijacked `CompactionSupervisorTest` and switched it to use MSQ engine and set it up with an auth config and policy enforcer (with a newly added `AllowAllWithPolicyAuthResource` which is essentially allow-all but with `NoRestrictionPolicy` permitted) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
