imbajin commented on code in PR #3331:
URL: https://github.com/apache/hugegraph/pull/3331#discussion_r4286307776
##########
hugegraph-server/hugegraph-api/src/main/java/org/apache/hugegraph/api/profile/GraphsAPI.java:
##########
@@ -693,6 +704,63 @@ public Map<String, GraphMode> mode(@Context GraphManager
manager,
return ImmutableMap.of("mode", g.mode());
}
+ @GET
+ @Timed
+ @Path("{name}/mode/owners")
+ @Produces(APPLICATION_JSON_WITH_CHARSET)
+ @RolesAllowed({"space", "$owner=$name"})
Review Comment:
Source recheck at this revision confirms that both loading-owner routes now
use the graph-space-qualified owner expression. The new test exercises the real
Jersey role filter and Authorizer, with positive scoped STATUS WRITE and
negative cross-space/cross-graph/no-permission cases. The previously reported
annotation blocker is addressed in source. Existing STATUS WRITE and
global-admin recovery checks remain. This is independent static review, not an
independently executed HTTP test; current-head CI and paired Loader/RC
acceptance remain separate.
Reviewed revision:
[b502b205de7f8db73b9336f5abfdcfe0ba3dd744](https://github.com/apache/hugegraph/commit/b502b205de7f8db73b9336f5abfdcfe0ba3dd744).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
