yuqi1129 opened a new issue, #13251:
URL: https://github.com/apache/gravitino/issues/13251

   ### What would you like to be improved?
   
   Metadata list requests create separate `AuthorizationRequestContext` 
instances for entry authorization, parent-scope visibility checks, and 
per-object filtering. These phases therefore cannot share cached authorization 
state, and JCasbin can repeat user/role-version queries within the same request 
even when shared role caches are warm.
   
   ### How should we improve?
   
   Reuse the entry context during read-only list filtering for the same 
principal, active roles, metalake, and authorizer. Pass it explicitly to filter 
workers, preserve deny handling, and clean up request state on both success and 
failure. Keep mutation operations and different security contexts isolated.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to