roryqi commented on PR #13928: URL: https://github.com/apache/gravitino/pull/13928#issuecomment-6261958818
Thanks for the detailed review. Addressed the documentation points in 672e3ae6ac: s3-role-arn is now documented as optional with the AWS_ROLE_ARN fallback, path-based versus catalog-level session-policy behavior is clarified, and the ADLS section now describes how the SAS covers the table location and requested write paths. Matching the other providers and honoring the paths in the credential context is the intended behavior here. Validating user-supplied write paths before they reach credential vending is a separate authorization concern and is outside this patch. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
