danhuawang opened a new issue, #7966: URL: https://github.com/apache/gravitino/issues/7966
### Version main branch ### Describe what's wrong Catalog owner and fileset owner are different users. Fileset owner failed to set a new owner. <img width="889" height="720" alt="Image" src="https://github.com/user-attachments/assets/9a52558d-acdb-4e46-897c-cc1cd206127e" /> <img width="1407" height="776" alt="Image" src="https://github.com/user-attachments/assets/e5577ae3-216a-4b8e-a907-cc4e1b886a4e" /> ### Error message and/or stacktrace ``` 2025-08-07 11:06:19.381 INFO [Gravitino-webserver-45] [org.apache.gravitino.server.web.rest.CatalogOperations.createCatalog(CatalogOperations.java:156)] - Received create catalog request for metalake: metalake5 2025-08-07 11:06:19.409 INFO [Gravitino-webserver-45] [org.apache.gravitino.connector.BaseCatalog.initAuthorizationPluginInstance(BaseCatalog.java:211)] - Authorization provider is not set! 2025-08-07 11:06:19.434 INFO [Gravitino-webserver-45] [org.apache.gravitino.server.web.rest.CatalogOperations.lambda$createCatalog$2(CatalogOperations.java:171)] - Catalog created: metalake5.f1 2025-08-07 11:06:19.462 INFO [Gravitino-webserver-154] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:115)] - Request: [2467014749652938509, METALAKE, 2491411714622932354, OWNER] ---> true 2025-08-07 11:06:19.462 INFO [Gravitino-webserver-154] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:117)] - Hit Policy: [2467014749652938509, METALAKE, 2491411714622932354, OWNER, allow] 2025-08-07 11:06:19.462 INFO [Gravitino-webserver-154] [org.apache.gravitino.server.web.rest.SchemaOperations.createSchema(SchemaOperations.java:119)] - Received create schema request: metalake5.f1.s1 2025-08-07 11:06:19.661 WARN [Gravitino-webserver-154] [org.apache.hadoop.util.NativeCodeLoader.<clinit>(NativeCodeLoader.java:60)] - Unable to load native-hadoop library for your platform... using builtin-java classes where applicable 2025-08-07 11:06:20.134 INFO [Gravitino-webserver-154] [org.apache.gravitino.catalog.fileset.FilesetCatalogOperations.lambda$createSchema$13(FilesetCatalogOperations.java:789)] - Schema metalake5.f1.s1 manages the existing location: hdfs://192.168.194.177:8020/tmp/s1 with location name: unknown 2025-08-07 11:06:20.152 INFO [Gravitino-webserver-154] [org.apache.gravitino.server.web.rest.SchemaOperations.lambda$createSchema$1(SchemaOperations.java:130)] - Schema created: metalake5.f1.s1 2025-08-07 11:06:20.184 INFO [Gravitino-webserver-180] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:115)] - Request: [2467014749652938509, METALAKE, 2491411714622932354, OWNER] ---> true 2025-08-07 11:06:20.184 INFO [Gravitino-webserver-180] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:117)] - Hit Policy: [2467014749652938509, METALAKE, 2491411714622932354, OWNER, allow] 2025-08-07 11:06:20.184 INFO [Gravitino-webserver-180] [org.apache.gravitino.server.web.rest.FilesetOperations.createFileset(FilesetOperations.java:150)] - Received create fileset request: metalake5.f1.s1.fs1 2025-08-07 11:06:20.194 INFO [Gravitino-webserver-180] [org.apache.gravitino.catalog.fileset.FilesetCatalogOperations.createMultipleLocationFileset(FilesetCatalogOperations.java:467)] - Fileset metalake5.f1.s1.fs1 manages the existing location hdfs://192.168.194.177:8020/tmp/fs1 with location name unknown 2025-08-07 11:06:20.221 INFO [Gravitino-webserver-180] [org.apache.gravitino.server.web.rest.FilesetOperations.lambda$createFileset$2(FilesetOperations.java:181)] - Fileset created: metalake5.f1.s1.fs1 2025-08-07 11:06:20.253 INFO [Gravitino-webserver-156] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:115)] - Request: [2467014749652938509, METALAKE, 2491411714622932354, OWNER] ---> true 2025-08-07 11:06:20.253 INFO [Gravitino-webserver-156] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:117)] - Hit Policy: [2467014749652938509, METALAKE, 2491411714622932354, OWNER, allow] 2025-08-07 11:06:20.293 INFO [Gravitino-webserver-140] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:115)] - Request: [2467014749652938509, METALAKE, 2491411714622932354, OWNER] ---> true 2025-08-07 11:06:20.293 INFO [Gravitino-webserver-140] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:117)] - Hit Policy: [2467014749652938509, METALAKE, 2491411714622932354, OWNER, allow] 2025-08-07 11:06:20.327 INFO [Gravitino-webserver-183] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:115)] - Request: [2467014749652938509, METALAKE, 2491411714622932354, OWNER] ---> true 2025-08-07 11:06:20.328 INFO [Gravitino-webserver-183] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:117)] - Hit Policy: [2467014749652938509, METALAKE, 2491411714622932354, OWNER, allow] 2025-08-07 11:06:20.606 INFO [Gravitino-webserver-112] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:115)] - Request: [3560867190423380236, METALAKE, 2491411714622932354, OWNER] ---> false 2025-08-07 11:06:20.606 INFO [Gravitino-webserver-112] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:117)] - Hit Policy: [] 2025-08-07 11:06:20.616 INFO [Gravitino-webserver-112] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:115)] - Request: [3560867190423380236, FILESET, 2560746360239235311, OWNER] ---> true 2025-08-07 11:06:20.616 INFO [Gravitino-webserver-112] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:117)] - Hit Policy: [3560867190423380236, FILESET, 2560746360239235311, OWNER, allow] 2025-08-07 11:06:20.624 INFO [Gravitino-webserver-112] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:115)] - Request: [3560867190423380236, METALAKE, 2491411714622932354, USE_SCHEMA] ---> false 2025-08-07 11:06:20.624 INFO [Gravitino-webserver-112] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:117)] - Hit Policy: [] 2025-08-07 11:06:20.635 INFO [Gravitino-webserver-112] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:115)] - Request: [3560867190423380236, CATALOG, 1018643541561558441, USE_SCHEMA] ---> false 2025-08-07 11:06:20.635 INFO [Gravitino-webserver-112] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:117)] - Hit Policy: [] 2025-08-07 11:06:20.643 INFO [Gravitino-webserver-112] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:115)] - Request: [3560867190423380236, SCHEMA, 4251935219740716338, USE_SCHEMA] ---> false 2025-08-07 11:06:20.643 INFO [Gravitino-webserver-112] [org.casbin.jcasbin.util.Util.logEnforce(Util.java:117)] - Hit Policy: [] 2025-08-07 11:06:20.644 WARN [Gravitino-webserver-112] [org.apache.gravitino.server.web.filter.GravitinoInterceptionService$MetadataAuthorizationMethodInterceptor.invoke(GravitinoInterceptionService.java:140)] - Authorization failed - User: Molly, Operation: setOwnerForObject, Metadata: metalake5, Expression: CAN_SET_OWNER ``` ### How to reproduce Scenario: test setOwner failed Given Switch user to anonymous Given Create metalake metalake5 Given I set metalake metalake5 Given Add all users to metalake metalake5 Given Create fileset catalog f1,location /tmp/f1,comment test,metalake metalake5 Given Create schema s1,location /tmp/s1,comment test,catalog f1,metalake metalake5 Given Create fileset fs1,type is MANAGED,comment is test,storgeLocation is /tmp/fs1, schema s1 catalog f1 metalake metalake5 Given Assign catalog f1 owner to User Alice, metalake metalake5 Given Assign schema s1 owner to User Molly, metalake metalake5, catalog f1 Given Assign fileset fs1 owner to User Molly, metalake metalake5, catalog f1, schema s1 When Switch user to Molly And get fileset fs1 owner is user Molly, metalake metalake5, catalog f1, schema s1 Then Assign fileset fs1 owner to User Tom, metalake metalake5, catalog f1, schema s1 ### Additional context _No response_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
