suneet-s commented on pull request #11680:
URL: https://github.com/apache/druid/pull/11680#issuecomment-916209027


   @kfaraz Is it possible to add integration tests that call all the different 
endpoints that are available on the ingest path and validate that a user needs 
DATASOURCE WRITE permission to see .
   
   I skimmed the code and noticed users with DATASOURCE READ can see metadata 
about the segments. I think this seems ok since a DATASOURCE READ user may need 
to know which segments were available when a query was executed so they would 
have a need. 
   
   I dug a little bit and it seems like the segment metadata could include the 
loadSpec. Do you think that should also require DATASOURCE WRITE permissions?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to