henrib commented on PR #6702: URL: https://github.com/apache/hive/pull/6702#issuecomment-5316607585
Update: moved the `loadTable` read authorization out of the adapter and into `HMSCachingCatalog`. It's now enforced only on cache hits (which bypass HMS); misses reload through HMS and are authorized by `ReadTableEvent`, so cold loads are no longer double-authorized. Dropped the `loadView` adapter check for the same reason — views are never cached, so `loadView` always reaches HMS. Since the check now runs on every hit, the per-thread authorizer toolkit is memoized in a `ThreadLocal` (extracted into `newRequestAuthorizer`), refreshing identity per call for pooled threads. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
