yujun777 commented on PR #69977: URL: https://github.com/apache/doris/pull/69977#issuecomment-6574803117
Following up on my earlier comment: requiring ALTER exclusively would break existing refresh or scheduling accounts that currently have only CREATE privilege. Granting ALTER to those accounts also gives them additional capabilities to modify the MV. Could we use the existing PrivPredicate.ALTER_CREATE instead? It accepts either CREATE or ALTER, preserving existing access while allowing ALTER-only users to perform these operations. I would prefer this compatibility-preserving approach, with the error messages and user documentation updated to describe CREATE or ALTER. Please also add basic privilege cases covering CREATE-only success, ALTER-only success, and denial when neither privilege is present. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
