Gabriel39 opened a new pull request, #67695: URL: https://github.com/apache/doris/pull/67695
## What problem does this PR solve? Iceberg maintenance actions can load a table under the catalog authentication context but execute metadata reads and commits after that context has ended. On HDFS catalogs that specify a Hadoop user, metadata commits can therefore run as the FE process user and fail with a permission error. ## What is changed and how does it work? - Execute the complete external table action within the catalog ExecutionAuthenticator scope. - Preserve the existing UserException handling when the authenticated execution implementation wraps checked exceptions. - Add a regression test that verifies the action runs inside exactly one catalog authentication scope. ## Check List - [x] Unit test - [x] FE Checkstyle ## Tests - mvn validate -pl fe-core -am -DskipTests - mvn -pl fe-core -am compiler:compile compiler:testCompile surefire:test -Dtest=ExecuteActionCommandTest -DfailIfNoTests=false -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
