This is an automated email from the ASF dual-hosted git repository.
yuqi1129 pushed a change to branch cherry-pick-f742f110-to-branch-1.3
in repository https://gitbox.apache.org/repos/asf/gravitino.git
from 55b4ba1d05 Resolve cherry-pick conflicts for branch-1.3
add 2f07d5189a [#11089] fix(lance): backport auxiliary-mode authentication
to 1.3 (#13941)
add b3fa994681 Merge remote-tracking branch 'origin/branch-1.3' into
pr-13954
No new revisions were added by this update.
Summary of changes:
conf/gravitino.conf.template | 5 +-
docs/lance-rest-service.md | 21 +-
...BaseMetadataAuthorizationMethodInterceptor.java | 219 -------
...bergMetadataAuthorizationMethodInterceptor.java | 35 +-
.../gravitino/lance/common/config/LanceConfig.java | 6 +
.../lance/common/ops/LanceMetadataFilter.java | 94 +++
.../lance/common/ops/NamespaceWrapper.java | 42 ++
.../lance/common/ops/gravitino/CommonUtil.java | 15 +-
.../GravitinoLanceNameSpaceOperations.java | 83 ++-
.../gravitino/GravitinoLanceNamespaceWrapper.java | 454 +++++++++++++-
.../gravitino/GravitinoLanceTableOperations.java | 79 ++-
.../common/ops/gravitino/ObjectIdentifier.java | 40 +-
.../lance/common/config/TestLanceConfig.java | 4 +
.../TestGravitinoLanceNamespaceWrapper.java | 235 ++++++++
lance/lance-rest-server/build.gradle.kts | 1 +
.../apache/gravitino/lance/LanceRESTService.java | 56 +-
.../lance/service/LanceServiceIdentityFilter.java | 83 +++
.../LanceAuthorizationExpressions.java | 132 ++++
.../LanceAuthorizationMetadataFilter.java | 130 ++++
...anceMetadataAuthorizationMethodInterceptor.java | 318 ++++++++++
.../LanceRESTAuthInterceptionService.java | 77 +++
.../annotations/LanceRootNamespace.java | 9 +-
.../service/rest/LanceNamespaceOperations.java | 15 +
.../lance/service/rest/LanceTableOperations.java | 15 +
.../lance/TestLanceAuxiliaryAuthentication.java | 200 +++++++
.../ops/gravitino/TestGravitinoLanceExistOk.java | 171 ++++++
.../gravitino/TestGravitinoLanceModeParsing.java | 9 +-
.../TestGravitinoLanceNameSpaceOperations.java | 63 +-
.../TestGravitinoLanceNamespaceListFiltering.java | 136 +++++
.../TestGravitinoLanceTableOperations.java | 10 +-
.../test/LanceNamespaceAuthorizationIT.java | 315 ++++++++++
.../integration/test/LanceRESTServiceAuthIT.java | 56 +-
.../test/LanceTableAuthorizationIT.java | 566 ++++++++++++++++++
.../service/TestLanceServiceIdentityFilter.java | 126 ++++
.../TestLanceExistingTableReadGuard.java | 132 ++++
...anceMetadataAuthorizationMethodInterceptor.java | 663 +++++++++++++++++++++
...TestLanceRESTEndpointAuthorizationCoverage.java | 148 +++++
.../AuthorizationExpressionConstants.java | 10 +
...BaseMetadataAuthorizationMethodInterceptor.java | 315 ++++++++++
...BaseMetadataAuthorizationMethodInterceptor.java | 368 ++++++++++++
40 files changed, 5113 insertions(+), 343 deletions(-)
delete mode 100644
iceberg/iceberg-rest-server/src/main/java/org/apache/gravitino/server/web/filter/BaseMetadataAuthorizationMethodInterceptor.java
create mode 100644
lance/lance-common/src/main/java/org/apache/gravitino/lance/common/ops/LanceMetadataFilter.java
create mode 100644
lance/lance-rest-server/src/main/java/org/apache/gravitino/lance/service/LanceServiceIdentityFilter.java
create mode 100644
lance/lance-rest-server/src/main/java/org/apache/gravitino/lance/service/authorization/LanceAuthorizationExpressions.java
create mode 100644
lance/lance-rest-server/src/main/java/org/apache/gravitino/lance/service/authorization/LanceAuthorizationMetadataFilter.java
create mode 100644
lance/lance-rest-server/src/main/java/org/apache/gravitino/lance/service/authorization/LanceMetadataAuthorizationMethodInterceptor.java
create mode 100644
lance/lance-rest-server/src/main/java/org/apache/gravitino/lance/service/authorization/LanceRESTAuthInterceptionService.java
copy
server-common/src/main/java/org/apache/gravitino/server/authorization/annotations/AuthorizationObjectType.java
=>
lance/lance-rest-server/src/main/java/org/apache/gravitino/lance/service/authorization/annotations/LanceRootNamespace.java
(78%)
create mode 100644
lance/lance-rest-server/src/test/java/org/apache/gravitino/lance/TestLanceAuxiliaryAuthentication.java
create mode 100644
lance/lance-rest-server/src/test/java/org/apache/gravitino/lance/common/ops/gravitino/TestGravitinoLanceExistOk.java
create mode 100644
lance/lance-rest-server/src/test/java/org/apache/gravitino/lance/common/ops/gravitino/TestGravitinoLanceNamespaceListFiltering.java
rename
lance/lance-rest-server/src/test/java/org/apache/gravitino/lance/{service/rest
=> common/ops/gravitino}/TestGravitinoLanceTableOperations.java (94%)
create mode 100644
lance/lance-rest-server/src/test/java/org/apache/gravitino/lance/integration/test/LanceNamespaceAuthorizationIT.java
create mode 100644
lance/lance-rest-server/src/test/java/org/apache/gravitino/lance/integration/test/LanceTableAuthorizationIT.java
create mode 100644
lance/lance-rest-server/src/test/java/org/apache/gravitino/lance/service/TestLanceServiceIdentityFilter.java
create mode 100644
lance/lance-rest-server/src/test/java/org/apache/gravitino/lance/service/authorization/TestLanceExistingTableReadGuard.java
create mode 100644
lance/lance-rest-server/src/test/java/org/apache/gravitino/lance/service/authorization/TestLanceMetadataAuthorizationMethodInterceptor.java
create mode 100644
lance/lance-rest-server/src/test/java/org/apache/gravitino/lance/service/authorization/TestLanceRESTEndpointAuthorizationCoverage.java
create mode 100644
server-common/src/main/java/org/apache/gravitino/server/web/filter/BaseMetadataAuthorizationMethodInterceptor.java
create mode 100644
server-common/src/test/java/org/apache/gravitino/server/web/filter/TestBaseMetadataAuthorizationMethodInterceptor.java
