lasdf1234 opened a new issue, #12529:
URL: https://github.com/apache/gravitino/issues/12529
### Describe the feature
Add enterprise security Users-page APIs under
`/web/security/metalakes/{metalake}/users`:
- List metalake users with `origin` (`Local` / `Provisioned`) derived from
`externalId`.
- Batch-update `enabled` for local users by username in one all-or-nothing
SQL.
### Motivation
The security Users page needs:
- A list that can distinguish IdP/SCIM provisioned users from local users.
- Bulk Active / Suspended for local users only. Provisioned users must not
be updated this way (`externalId` present).
OSS `GET /metalakes/{metalake}/users` does not expose `origin`, and there is
no public batch enable/disable API.
### Describe the solution
- `GET /api/web/security/metalakes/{metalake}/users` returns extended users.
`origin` is `Provisioned` when `externalId` is set, otherwise `Local`.
`enabled` maps to Active / Suspended.
- `PUT /api/web/security/metalakes/{metalake}/users/enabled` with `{
"users": [...], "enabled": true|false }`. One SQL; every listed user must exist
and must not have `externalId`, otherwise no rows are updated.
### Additional context
Enterprise-only REST in `datastrato-server` (`ExtendedUserOperations`).
Batch SQL lives in `core-extension`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
