roryqi opened a new pull request, #14541: URL: https://github.com/apache/gravitino/pull/14541
### What changes were proposed in this pull request? Consolidate #14445, #14448, #14451, #14462, #14469, #14474 and #14477 into one PR: - Harden namespace identity, catalog configuration authorization and view visibility; reject null namespace property updates. - Support access-delegation lists, vend credentials only for supported storage schemes and allow AWS default credentials for STS. - Correct incremental scan bounds, support constant filters, validate scan requests and reject unrepresentable deletion-vector plans. - Attribute object creation and schema changes to the IRC user; audit authorization denials and metrics reports as distinct operations. - Synchronize Iceberg owner properties after ownership transfers and protect them from IRC property updates. ### Why are the changes needed? Fix authorization gaps, REST protocol incompatibilities, incorrect scan results and inconsistent ownership and audit metadata. Fixes #14444, fixes #14447, fixes #14450, fixes #14461, fixes #14468, fixes #14473, fixes #14476. ### Does this PR introduce _any_ user-facing change? Yes. Namespace creation rejects ambiguous names when authorization is enabled, null namespace property updates return 400, and catalog configuration and view fallback requests enforce authorization. Credential delegation follows supported mechanisms, incremental scans exclude the start snapshot, unrepresentable deletion-vector plans return an error, and ownership and audit metadata stay consistent. ### How was this patch tested? Retains the regression tests from all seven source PRs and the latest main branch. - `./gradlew spotlessApply` - `./gradlew :core:test :server-common:test :bundles:aws:test :iceberg:iceberg-rest-server:test -PskipITs` - After rebasing onto main: `./gradlew :iceberg:iceberg-common:test :iceberg:iceberg-rest-server:test -PskipITs` - `git diff --check` Final module results: core 3,325 tests (2 skipped), server-common 539, AWS 38, iceberg-common 88 and iceberg-rest-server 547. No failures or errors. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
