bharos opened a new pull request, #9214:
URL: https://github.com/apache/gravitino/pull/9214

   <!--
   1. Title: [#<issue>] <type>(<scope>): <subject>
      Examples:
        - "[#123] feat(operator): support xxx"
        - "[#233] fix: check null before access result in xxx"
        - "[MINOR] refactor: fix typo in variable name"
        - "[MINOR] docs: fix typo in README"
        - "[#255] test: fix flaky test NameOfTheTest"
      Reference: https://www.conventionalcommits.org/en/v1.0.0/
   2. If the PR is unfinished, please mark this PR as draft.
   -->
   
   ### What changes were proposed in this pull request?
   Tests for
   - Privilege escalation prevention: SELECT cannot be used to MODIFY tables
   - Deny-by-default security: DENY takes precedence over ALLOW
   - Explicit privilege validation: ModifyTable privilege works independently 
of ownership
   - Returns 403 for non-existent table if user doesn't have access to schema
   
   ### Why are the changes needed?
   More tests
   
   ### Does this PR introduce _any_ user-facing change?
   No
   ### How was this patch tested?
   Integration tests


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to