nevzheng opened a new issue, #14245: URL: https://github.com/apache/gravitino/issues/14245
### Describe the proposal Some write paths check the wrong privilege, or skip or misorder their authorization side effects: plugin privilege updates (for example Ranger), owner records, and authorizer caches. The result is a check that is too loose or too strict, or plugin state that drifts from Gravitino's metadata. This epic tracks small, independent fixes. Each one has its own issue, a failing unit test on `main`, and a PR. The longer-term direction is one place where post-commit side effects run, so new write paths cannot miss them. That design is out of scope here. ### Task list Iceberg REST privilege checks: - [ ] #14242 Register with `overwrite=true` is authorized as a plain create - [ ] #14243 A staged-create commit is authorized as a table modify instead of a create - [ ] #14244 Iceberg REST accepts the reserved `gravitino.identifier` property, and import reuses that id More sub-issues follow (catalog drop, Iceberg REST hooks, user removal and caches, Lance REST). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
