danhuawang opened a new issue, #8266: URL: https://github.com/apache/gravitino/issues/8266
### Version main branch ### Describe what's wrong I can use any user to list files in a fileset, but this operation is supposed to be controlled by 'READ_FILESET' priviledge. <img width="983" height="681" alt="Image" src="https://github.com/user-attachments/assets/17e3598e-db48-4a06-aa89-3c870e803a2d"; /> ### Error message and/or stacktrace N/A ### How to reproduce 1. Create a fileset with a location which hold a few of files. 2. Call gravitino list files api with any user not belong to the current metalake. It's supposed to be rejected. ### Additional context _No response_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
