jerryshao opened a new issue, #13085:
URL: https://github.com/apache/gravitino/issues/13085
### What would you like to be improved?
`POST /api/metalakes/{metalake}/catalogs/{catalog}/testConnection` requires
metalake or catalog ownership whether or not the request carries proposed
changes.
Testing with the stored configuration makes the server reach the backing
system. Loading the catalog or listing its schemas does the same thing, and
those only require `USE_CATALOG`. Owner-only therefore adds no protection. It
only sends routine reachability checks through the catalog owner.
### How should we improve?
Split the authorization by request body:
- No body, or empty `updates`: same as `loadCatalog` (`USE_CATALOG` or
owner).
- Non-empty `updates`: metalake or catalog owner, same as `alterCatalog`,
because the caller chooses the configuration the server connects to.
Return HTTP 403 instead of 500 when the proposed-change test is denied, and
document the rule in `access-control.md` and the OpenAPI spec.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
