laserninja commented on PR #13794: URL: https://github.com/apache/gravitino/pull/13794#issuecomment-6161070097
Would you agree with landing the server authorization fix in a separate prerequisite PR, then updating this PR and rerunning PythonIT? The failing `test_tag_authorization` exposes an existing server issue: without outer parentheses around the `CAN_ACCESS_METADATA` expansion, metadata access can bypass the tag-permission check. The proposed [server fix and regression test](https://github.com/laserninja/gravitino/commit/f5e232c5f5dee483e51525601b017f8c454b0e7b) are prepared on a separate branch. Prior local validation with that fix passed all 25 relevant Python integration tests and 494 Java tests. This would keep #13794 focused on Python Semantic Model tag/owner support and retain the denied-read assertion unchanged. Does that separation and merge order look good, or would you prefer the server correction included here? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
