roryqi commented on code in PR #12964:
URL: https://github.com/apache/gravitino/pull/12964#discussion_r4035539725
##########
server/src/main/java/org/apache/gravitino/server/web/rest/MetadataObjectPolicyOperations.java:
##########
@@ -179,48 +168,36 @@ public Response listPoliciesForMetadataObject(
MetadataObjects.parse(
fullName,
MetadataObject.Type.valueOf(type.toUpperCase(Locale.ROOT)));
- Set<PolicyDTO> policies = Sets.newHashSet();
- PolicyEntity[] nonInheritedPolicies =
+ PolicyEntity[] policies =
policyDispatcher.listPolicyInfosForMetadataObject(metalake,
object);
Review Comment:
Fixed by removing mixed selector-result conflict handling from
ObjectPolicyResolver. This resolver is only responsible for selection: a policy
is selected when any relation selector matches, and non-matching relations do
not negate a match. Conflict decisions belong to future enforcement consumers,
not this lookup path. As a result, this exception path—and the hidden
policy-name disclosure through it—no longer exists. The resolver test and
design document now reflect that boundary.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
