yuqi1129 opened a new issue, #12557: URL: https://github.com/apache/gravitino/issues/12557
### Describe the subtask Preserve the authenticated request principal while executing Lance REST namespace and table operations. The current auxiliary-mode service identity filter replaces the request user with the Lance service user. Authorization, ownership, and audit records must instead use the authenticated caller. - Establish the request principal around every namespace and table operation. - Preserve active-role request context. - Restore the previous principal after the request. - Keep the configured service identity for non-user service calls only. - Cover authenticated, anonymous, exceptional, and nested-principal cases with unit and integration tests. The PR, including tests, should stay below 1000 changed lines. ### Parent issue #9087 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
