ArnavBalyan opened a new pull request, #4758: URL: https://github.com/apache/polaris/pull/4758
- dropGenericTable authorizes via the create under namespace, so the authz target is the parent namespace, not the table. - Table drop grant on generic table is ignored and the drop is wrongly denied. - Use the correct table level check instead of the namespace. - Add ut ## Checklist - [X] ๐ก๏ธ Don't disclose security issues! (contact [email protected]) - [X] ๐ Clearly explained why the changes are needed, or linked related issues: Fixes # - [X] ๐งช Added/updated tests with good coverage, or manually tested (and explained how) - [X] ๐ก Added comments for complex logic - [X] ๐งพ Updated `CHANGELOG.md` (if needed) - [X] ๐ Updated documentation in `site/content/in-dev/unreleased` (if needed) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
