git-hulk opened a new pull request, #3570: URL: https://github.com/apache/kvrocks/pull/3570
DEBUG, FLUSHMEMTABLE, FLUSHBLOCKCACHE, and _db_name operate on global or cross-namespace state (the shared block cache, all column families, the process-wide db-size-limit flag, and the configured db name), yet their command attributes omitted the `admin` flag. A non-admin client authenticated with a namespace token could invoke them and affect every namespace on the server. Add the `admin` flag so these commands are rejected for non-admin connections, matching Redis (which gates DEBUG behind admin) and completing the hardening started for APPLYBATCH in #3458. This is a breaking change from the user side: clients authenticated with a namespace token can no longer run these commands, so we should highlight it in the release notes. Assistant-By Claude Opus 4.8 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
