yuqi1129 opened a new issue, #12559: URL: https://github.com/apache/gravitino/issues/12559
### Describe the subtask Authorize Lance REST namespace create, update, and drop operations for both catalog-level and schema-level namespace IDs. - Require CREATE_CATALOG for one-level namespace creation. - Require USE_CATALOG and CREATE_SCHEMA for two-level namespace creation. - Require ownership for overwrite, catalog drop, and schema drop operations. - Prevent create privileges from being used to overwrite an existing object. - Assign the authenticated caller as owner after successful creation. - Ensure denied requests perform no mutation. - Cover create, exist-ok, overwrite, restrict, cascade, and concealed-not-found behavior. Depends on the Lance namespace authorization framework subtask. The PR, including tests, should stay below 1000 changed lines. ### Parent issue #9087 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
