yuqi1129 opened a new pull request, #12563: URL: https://github.com/apache/gravitino/pull/12563
### What changes were proposed in this pull request? - Preserve the authenticated caller identity and active roles for auxiliary-mode Lance REST requests. - Use the configured Lance service identity only when the request is anonymous. - Add unit tests covering authenticated callers, active roles, anonymous fallback, nested principals, and exception recovery. - Add integration tests verifying audit creators for both authenticated and anonymous requests. ### Why are the changes needed? The Lance service identity filter unconditionally executed requests as the configured service user. This replaced the principal already established by the authentication filter, causing authorization, ownership, and audit operations to use the service identity instead of the authenticated caller. Fix: #12557 ### Does this PR introduce _any_ user-facing change? Yes. Authenticated auxiliary-mode Lance REST metadata operations now run as the authenticated caller. Anonymous requests continue to use the configured service identity. No API or configuration changes are introduced. ### How was this patch tested? - `./gradlew :lance:lance-rest-server:check -PskipITs` - `./gradlew :lance:lance-rest-server:test --tests org.apache.gravitino.lance.integration.test.LanceRESTServiceAuthIT -PskipDockerTests=false` - `git diff --check` All tests were run with proxy environment variables disabled. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
