Hello Kudu Jenkins,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/23045
to look at the new patch set (#4).
Change subject: Add REST API integration tests
......................................................................
Add REST API integration tests
Additions to master_authz-itest.cc:
- Add TestTableIsolationBetweenUsersWithRestApi: Verify users cannot
access unauthorized tables via PUT/DELETE endpoints (HTTP 403)
- Add TestRestApiCreateTableWithAuthorization: Verify table creation
via POST /api/v1/tables enforces CREATE privileges
- Add TestRestApiDeleteTableWithAuthorization: Verify table deletion
via DELETE /api/v1/tables/<table_id> enforces DROP privileges
- Add TestRestApiPrincipalMapping: Verify Kerberos principals are
properly mapped to local usernames for REST API access
- Add TestListTablesIsolationWithRestApi: Verify GET /api/v1/tables
filters results based on user permissions
Multi-Master SPNEGO Tests in spnego_authz-itest.cc:
- Add TestAuthenticatedLeaderAccess: Verify authenticated REST API
access to leader master with SPNEGO authentication
- Add TestUnauthenticatedRequestsRejected: Verify all masters properly
reject unauthenticated requests with HTTP 401
- Add TestTableOperationsWithAuthentication: Verify table operations
work correctly across multi-master setup with SPNEGO authentication
Change-Id: Ifd3ff0dfd67cbc2b5ed0454372dd2bcea71e2ba3
---
M src/kudu/integration-tests/master_authz-itest.cc
M src/kudu/master/spnego_rest_catalog-test.cc
2 files changed, 346 insertions(+), 0 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/45/23045/4
--
To view, visit http://gerrit.cloudera.org:8080/23045
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: Ifd3ff0dfd67cbc2b5ed0454372dd2bcea71e2ba3
Gerrit-Change-Number: 23045
Gerrit-PatchSet: 4
Gerrit-Owner: Gabriella Lotz <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)
