nightcityblade opened a new pull request, #7677:
URL: https://github.com/apache/kyuubi/pull/7677
### Why are the changes needed?
The session configuration ignore and restrict lists are empty by default. In
a
multi-tenant deployment, leaving both lists empty lets clients override
sensitive session-level configuration during engine bootstrap and connection
setup. This adds an explicit administrator recommendation to the existing
security documentation.
Closes #7676.
### How was this patch tested?
- `env PATH=/usr/bin:/bin:/usr/sbin:/sbin dev/reformat`
- `sphinx-build -W --keep-going -D
suppress_warnings=myst.xref_missing,misc.highlighting_failure -b html docs
/tmp/kyuubi-docs-build-7676-focused`
- Confirmed the generated `security/authorization/spark/overview.html`
contains
the recommendation.
The Sphinx suppression covers existing warnings in unrelated documentation;
the changed page builds without warnings.
### Was this patch assisted by generative AI tooling?
Assisted-by: OpenAI Codex:GPT-5
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
