This is an automated email from the ASF dual-hosted git repository.
jshao pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/gravitino.git
from 95e23f290c [#7631] improvement: Update AuditInfo builder to create a
new instance for each build call (#7689)
new 8e6996d515 [#6841] feat: Introduce an authorization framework. (#6842)
new 6668c1e80c [#6775] feat(server): Introduce authorization annotations
(#6828)
new d33e30c3d1 [#6774] feat(authz): Support initialize GravitinoAuthorizer
(#7062)
new 7b329713de [#6829] feat(authz): Introduce
AuthorizationExpressionEvaluator and Converter (#7077)
new ba35f50e9e [#6827] feat(authz): Jcasbin model file for Gravitino
(#7086)
new 40798a5860 [#6786] feat(authz): Introduce JcasbinAuthorizer &
GravitinoAdapter (#7197)
new 9e3ce5d98a [#6788] feat(authz): Introduce MetadataFilterHelper to
filter the result data (#7167)
new 075a5809bc [#6787] feat(authz): Introduce GravitinoInterceptionService
(#7258)
new 3afd0f4131 [#6786] fix(authz): modify querying roles by user in
ROLE_USER_REL relation for JcasbinAuthorizer (#7376)
new 2b0cc83c4c [#7529] feat(authz): Support load ownership in
JcasbinAuthorizer (#7425)
new f2aaa9fb9b [#7449]feat(authz): Support Catalog Authorization (#7450)
new 9922dd1288 [#7549] improvement(authz): Improve the process logic of
authorization is disabled (#7566)
new d9102052c4 [#7522] feat(authz): Support schema authorization (#7536)
new 9e77cc5c23 [#7576] improvement(authz): Improve the authorization
expression (#7577)
new b21994e898 [#7542] feat(authz): Support table authorization (#7554)
new becc173e41 [#7602] feat(authz): Support Model Authorization (#7605)
new fc8e2eb5eb [#7570] feat(authz): Support topic authorization (#7580)
new add62dd9ba [#7545] feat(authz): Support fileset authorization (#7581)
new f4ac64bcb3 [#6762] feat(authz): Support Metadata Authorization
The 19 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../authorization/BaseRestApiAuthorizationIT.java | 85 +++
.../test/authorization/CatalogAuthorizationIT.java | 118 +++++
.../test/authorization/FilesetAuthorizationIT.java | 308 +++++++++++
.../test/authorization/ModelAuthorizationIT.java | 316 ++++++++++++
.../test/authorization/SchemaAuthorizationIT.java | 238 +++++++++
.../test/authorization/TableAuthorizationIT.java | 249 +++++++++
.../test/authorization/TopicAuthorizationIT.java | 240 +++++++++
.../org/apache/gravitino/auth/AuthConstants.java | 3 +
.../main/java/org/apache/gravitino/Configs.java | 7 +
.../java/org/apache/gravitino/GravitinoEnv.java | 20 +
.../authorization/GravitinoAuthorizer.java | 104 ++++
.../gravitino/authorization/OwnerManager.java | 31 +-
.../hook/AccessControlHookDispatcher.java | 33 +-
.../gravitino/storage/relational/JDBCBackend.java | 2 +
.../relational/service/RoleMetaService.java | 15 +-
gradle/libs.versions.toml | 9 +-
server-common/build.gradle.kts | 4 +
.../authentication/AuthenticationFilter.java | 12 +-
.../authorization/GravitinoAuthorizerProvider.java | 92 ++++
.../server/authorization/MetadataFilterHelper.java | 164 ++++++
.../server/authorization/MetadataIdConverter.java | 5 +-
.../authorization/PassThroughAuthorizer.java | 63 +++
.../annotations/AuthorizationExpression.java | 33 +-
.../annotations/AuthorizationMetadata.java | 27 +-
.../AuthorizationMetadataPrivileges.java | 35 +-
.../AuthorizationExpressionConverter.java | 174 +++++++
.../AuthorizationExpressionEvaluator.java | 78 +++
.../authorization/jcasbin/GravitinoAdapter.java | 57 +++
.../authorization/jcasbin/JcasbinAuthorizer.java | 245 +++++++++
.../src/main/resources/jcasbin_model.conf | 55 ++
.../authorization/MockGravitinoAuthorizer.java | 72 +++
.../TestGravitinoAuthorizerProvider.java | 36 +-
.../server/authorization/TestJcasbinModel.java | 569 +++++++++++++++++++++
.../authorization/TestMetadataFilterHelper.java | 124 +++++
.../authorization/TestPassThroughAuthorizer.java | 18 +-
.../authorization/annotations/TestAnnotations.java | 123 +++++
.../TestAuthorizationExpressionConverter.java | 123 +++++
.../TestAuthorizationExpressionEvaluator.java | 100 ++++
.../jcasbin/TestJcasbinAuthorizer.java | 329 ++++++++++++
.../src/test/resources/jcasbin_policy.txt | 47 +-
server/build.gradle.kts | 3 +-
.../apache/gravitino/server/GravitinoServer.java | 15 +-
.../web/filter/GravitinoInterceptionService.java | 204 ++++++++
.../server/web/rest/CatalogOperations.java | 80 ++-
.../server/web/rest/FilesetOperations.java | 102 +++-
.../gravitino/server/web/rest/ModelOperations.java | 215 ++++++--
.../server/web/rest/SchemaOperations.java | 56 +-
.../gravitino/server/web/rest/TableOperations.java | 75 ++-
.../gravitino/server/web/rest/TopicOperations.java | 76 ++-
.../gravitino/server/TestGravitinoServer.java | 2 +-
.../filter/TestGravitinoInterceptionService.java | 122 +++++
.../server/web/rest/BaseOperationsTest.java | 25 +-
.../server/web/rest/TestCatalogOperations.java | 3 +-
.../server/web/rest/TestFilesetOperations.java | 3 +-
.../server/web/rest/TestModelOperations.java | 3 +-
.../server/web/rest/TestOwnerOperations.java | 3 +-
.../server/web/rest/TestPermissionOperations.java | 3 +-
.../server/web/rest/TestSchemaOperations.java | 3 +-
.../server/web/rest/TestTableOperations.java | 3 +-
.../server/web/rest/TestTopicOperations.java | 3 +-
.../MockAuthorizationExpressionEvaluator.java | 74 +++
.../TestCatalogAuthorizationExpression.java | 121 +++++
.../TestFilesetAuthorizationExpression.java | 186 +++++++
.../TestModelAuthorizationExpression.java | 435 ++++++++++++++++
.../TestSchemaAuthorizationExpression.java | 137 +++++
.../TestTableAuthorizationExpression.java | 252 +++++++++
.../TestTopicAuthorizationExpression.java | 186 +++++++
67 files changed, 6483 insertions(+), 270 deletions(-)
create mode 100644
clients/client-java/src/test/java/org/apache/gravitino/client/integration/test/authorization/BaseRestApiAuthorizationIT.java
create mode 100644
clients/client-java/src/test/java/org/apache/gravitino/client/integration/test/authorization/CatalogAuthorizationIT.java
create mode 100644
clients/client-java/src/test/java/org/apache/gravitino/client/integration/test/authorization/FilesetAuthorizationIT.java
create mode 100644
clients/client-java/src/test/java/org/apache/gravitino/client/integration/test/authorization/ModelAuthorizationIT.java
create mode 100644
clients/client-java/src/test/java/org/apache/gravitino/client/integration/test/authorization/SchemaAuthorizationIT.java
create mode 100644
clients/client-java/src/test/java/org/apache/gravitino/client/integration/test/authorization/TableAuthorizationIT.java
create mode 100644
clients/client-java/src/test/java/org/apache/gravitino/client/integration/test/authorization/TopicAuthorizationIT.java
create mode 100644
core/src/main/java/org/apache/gravitino/authorization/GravitinoAuthorizer.java
create mode 100644
server-common/src/main/java/org/apache/gravitino/server/authorization/GravitinoAuthorizerProvider.java
create mode 100644
server-common/src/main/java/org/apache/gravitino/server/authorization/MetadataFilterHelper.java
create mode 100644
server-common/src/main/java/org/apache/gravitino/server/authorization/PassThroughAuthorizer.java
copy api/src/main/java/org/apache/gravitino/annotation/Stable.java =>
server-common/src/main/java/org/apache/gravitino/server/authorization/annotations/AuthorizationExpression.java
(60%)
copy api/src/main/java/org/apache/gravitino/annotation/Evolving.java =>
server-common/src/main/java/org/apache/gravitino/server/authorization/annotations/AuthorizationMetadata.java
(67%)
copy api/src/main/java/org/apache/gravitino/annotation/Stable.java =>
server-common/src/main/java/org/apache/gravitino/server/authorization/annotations/AuthorizationMetadataPrivileges.java
(58%)
create mode 100644
server-common/src/main/java/org/apache/gravitino/server/authorization/expression/AuthorizationExpressionConverter.java
create mode 100644
server-common/src/main/java/org/apache/gravitino/server/authorization/expression/AuthorizationExpressionEvaluator.java
create mode 100644
server-common/src/main/java/org/apache/gravitino/server/authorization/jcasbin/GravitinoAdapter.java
create mode 100644
server-common/src/main/java/org/apache/gravitino/server/authorization/jcasbin/JcasbinAuthorizer.java
create mode 100644 server-common/src/main/resources/jcasbin_model.conf
create mode 100644
server-common/src/test/java/org/apache/gravitino/server/authorization/MockGravitinoAuthorizer.java
copy core/src/test/java/org/apache/gravitino/cache/TestCacheFactory.java =>
server-common/src/test/java/org/apache/gravitino/server/authorization/TestGravitinoAuthorizerProvider.java
(54%)
create mode 100644
server-common/src/test/java/org/apache/gravitino/server/authorization/TestJcasbinModel.java
create mode 100644
server-common/src/test/java/org/apache/gravitino/server/authorization/TestMetadataFilterHelper.java
copy
spark-connector/spark-common/src/test/java/org/apache/gravitino/spark/connector/plugin/TestGravitinoDriverPlugin.java
=>
server-common/src/test/java/org/apache/gravitino/server/authorization/TestPassThroughAuthorizer.java
(65%)
create mode 100644
server-common/src/test/java/org/apache/gravitino/server/authorization/annotations/TestAnnotations.java
create mode 100644
server-common/src/test/java/org/apache/gravitino/server/authorization/expression/TestAuthorizationExpressionConverter.java
create mode 100644
server-common/src/test/java/org/apache/gravitino/server/authorization/expression/TestAuthorizationExpressionEvaluator.java
create mode 100644
server-common/src/test/java/org/apache/gravitino/server/authorization/jcasbin/TestJcasbinAuthorizer.java
copy clients/client-python/.gitignore =>
server-common/src/test/resources/jcasbin_policy.txt (61%)
create mode 100644
server/src/main/java/org/apache/gravitino/server/web/filter/GravitinoInterceptionService.java
create mode 100644
server/src/test/java/org/apache/gravitino/server/web/filter/TestGravitinoInterceptionService.java
copy
clients/filesystem-hadoop3/src/test/java/org/apache/gravitino/filesystem/hadoop/integration/test/GravitinoVirtualFilesystemWithFSOpsDisabledIT.java
=>
server/src/test/java/org/apache/gravitino/server/web/rest/BaseOperationsTest.java
(59%)
create mode 100644
server/src/test/java/org/apache/gravitino/server/web/rest/authorization/MockAuthorizationExpressionEvaluator.java
create mode 100644
server/src/test/java/org/apache/gravitino/server/web/rest/authorization/TestCatalogAuthorizationExpression.java
create mode 100644
server/src/test/java/org/apache/gravitino/server/web/rest/authorization/TestFilesetAuthorizationExpression.java
create mode 100644
server/src/test/java/org/apache/gravitino/server/web/rest/authorization/TestModelAuthorizationExpression.java
create mode 100644
server/src/test/java/org/apache/gravitino/server/web/rest/authorization/TestSchemaAuthorizationExpression.java
create mode 100644
server/src/test/java/org/apache/gravitino/server/web/rest/authorization/TestTableAuthorizationExpression.java
create mode 100644
server/src/test/java/org/apache/gravitino/server/web/rest/authorization/TestTopicAuthorizationExpression.java
