carloea2 opened a new issue, #8137: URL: https://github.com/apache/texera/issues/8137
### What happened? The hub user-access endpoint combines `entityType` and `entityId` query values with `zip` without validating that the lists have equal lengths. An extra ID or type is silently ignored, so the response does not represent the full request. Before: mismatched query lists return 200 after dropping the unmatched value. Expected: mismatched query lists return 400, while equal-length lists keep working. ### How to reproduce? 1. Launch Texera from current `main`. 2. Request `GET /api/hub/user-access?entityType=workflow&entityId=7&entityId=8`. 3. Observe a 200 response containing only entity 7. 4. Reverse the mismatch by sending two types and one ID and observe the extra type is also ignored. ### Version/Branch 1.3.0-incubating-SNAPSHOT (main) ### Commit Hash (Optional) 98588bf2ab49aac65ebf002496eb057670e6fc07 ### What browsers are you seeing the problem on? Not browser-specific. ### Relevant log output No server error is logged because the unmatched query value is silently discarded. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
