raghav-reglobe commented on PR #67672: URL: https://github.com/apache/doris/pull/67672#issuecomment-5598173232
Regression run, for the record: built FE + BE from this branch (aarch64, on top of current master), stood up a single-node cluster, and ran `auth_p0/test_su_session_narrowing` through the regression framework — 1 suite, 0 failed. The six refusals the suite asserts on all fired with the expected messages: the global-only `GRANT PROXY_PRIV` rule, a switch attempted without `PROXY_PRIV`, a role the target doesn't hold, reads denied before the switch and for the person's direct grant under it, and a second `SU` in a switched session. The narrowed session sees only the tenant database in `SHOW DATABASES` / `information_schema.tables`, `session_is_narrowed()` reports correctly on both sides, and the person's own login is unaffected. FE unit tests on current master: 70/70 across the SU classes plus `AuthTest` / `FrontendServiceImplTest`; BE compiles and links. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
