jarredhj0214 opened a new pull request, #14191:
URL: https://github.com/apache/gravitino/pull/14191

   ### What changes were proposed in this pull request?
   
   Backport #13846 (commit 9f8197917b6918e7f62ae7e2eac4c825d537de60) to 
`branch-1.3`, resolving the conflicts in #14074.
   
   Add authorized existence probing for view loads and use internal dispatchers 
for table/view probes. Return a terminal 404 for absent objects, preventing 
concurrent creation from exposing metadata. Adapt the branch-specific imports 
and test mocks.
   
   ### Why are the changes needed?
   
   Clients need to distinguish absent views from inaccessible existing views 
when they have permission to probe existence. Probe results must not allow a 
subsequent unauthorized load.
   
   Refs #13845. Supersedes #14074.
   
   ### Does this PR introduce _any_ user-facing change?
   
   Authorized probes of absent views return 404; existing views remain 
forbidden without load permission. No API or configuration changes.
   
   ### How was this patch tested?
   
   - Passed 33 tests: `./gradlew :server:spotlessApply :server:test -PskipITs 
--tests '*TestLoadTableAuthorizationExecutor' --tests 
'*TestLoadViewAuthorizationExecutor' --tests 
'*TestGravitinoInterceptionService'`.
   - `git diff --check` passed.
   - Full `./gradlew spotlessApply` was attempted; the unrelated 
`:mcp-server:formatApplyPython` task failed because its installed Black 
extension is x86_64 on an ARM host. The affected Java formatting/checks passed.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to