roryqi opened a new pull request, #12850: URL: https://github.com/apache/gravitino/pull/12850
### What changes were proposed in this pull request? - Validate required OpenLineage event fields and dataset identifiers before dispatch. - Authorize every input and output dataset against its metalake and metadata permissions. - Resolve Gravitino metadata types from the OpenLineage `datasetType` facet. - Add REST, validation, and authorization unit tests. ### Why are the changes needed? The lineage ingest endpoint accepted malformed events and allowed authenticated callers to name datasets they could not access. Fix: #12840 ### Does this PR introduce _any_ user-facing change? Yes. - Invalid OpenLineage events are rejected with HTTP 400. - Events referencing unauthorized datasets are rejected with HTTP 403. - Behavior remains unchanged when authorization is disabled. ### How was this patch tested? - `./gradlew :lineage:compileJava` - `./gradlew :lineage:test` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
