roryqi commented on code in PR #13778:
URL: https://github.com/apache/gravitino/pull/13778#discussion_r4384792023
##########
iceberg/iceberg-rest-server/src/main/java/org/apache/gravitino/iceberg/RESTService.java:
##########
@@ -248,6 +251,15 @@ protected void configure() {
}
}
+ static IcebergReadRestrictionLoader loadReadRestrictionLoader(boolean
enableAuthorization) {
+ IcebergReadRestrictionLoader loader = IcebergReadRestrictionLoader.load();
+ if (loader.enabled() && !enableAuthorization) {
Review Comment:
The trust properties of the configured authenticator, including the existing
behavior of `simple`, are outside the scope of this PR. Read restrictions
consume the identity supplied by the authentication layer, just as
authorization does. The startup check validates the authorization prerequisite;
it does not validate or change authentication policy. We will keep that
boundary rather than introduce authenticator-specific startup restrictions or
warnings here.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
