JNSimba opened a new pull request, #69617: URL: https://github.com/apache/doris/pull/69617
### What problem does this PR solve? Issue Number: N/A Problem Summary: Users with permission to create CDC jobs can supply HTTP/HTTPS JDBC driver URLs that load code into the FE JVM. Require global ADMIN privilege when these URLs are supplied during CDC job creation, alteration, or `cdc_stream` construction, before source initialization or driver loading. Share the permission check across the FROM-TO and TVF paths. Preserve existing local driver permissions and S3 streaming behavior. ### Release note HTTP/HTTPS JDBC driver URLs in CDC jobs and `cdc_stream` now require global ADMIN privilege. Local driver file names and `file://` URLs retain their existing permission requirements. ### Check List (For Author) - Test: Not run, as requested. Compilation and Checkstyle validation have not completed. `git diff --check` passed. - Behavior changed: Yes. Supplying an HTTP/HTTPS CDC driver URL requires global ADMIN privilege. - Does this need documentation: Yes. The ADMIN requirement for remote CDC drivers should be documented; no documentation PR is included. ### Check List (For Reviewer who merge this PR) - [ ] Confirm the release note - [ ] Confirm test cases - [ ] Confirm document - [ ] Add branch pick label -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
