ruanwenjun opened a new pull request, #18560: URL: https://github.com/apache/dolphinscheduler/pull/18560
## Was this PR generated or assisted by AI? YES. The implementation and regression tests were assisted by AI and reviewed and validated locally. ## Purpose of the pull request Align the complete user-list API with least-privilege and data-minimization principles. The complete list remains available for administrative workflows, while general users continue retrieving their own account information through the existing current-user endpoint. Closes #18558. ## Brief change log - Require administrator access for the complete enabled-user list. - Exclude internal account fields from serialized user responses. - Add regression coverage for access control and response serialization. ## Verify this pull request This change added tests and can be verified as follows: - Run `mvn -pl dolphinscheduler-api -DskipSpotlessCheck -DskipCheckstyle -DskipRat -Dtest='UsersServiceTest,UsersControllerTest' clean test`. - Verify that all 38 tests complete with no failures or errors (one test is skipped). - Run `git diff --check`. ## Pull Request Notice [Pull Request Notice](https://github.com/apache/dolphinscheduler/blob/dev/docs/docs/en/contribute/join/pull-request.md) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
