This is an automated email from the ASF dual-hosted git repository.

cecemei pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/druid.git


The following commit(s) were added to refs/heads/master by this push:
     new 3c38f61647b docs: lookups are not subject to authorization (#20606)
3c38f61647b is described below

commit 3c38f61647b132a0f84aa86a60334eca13b49492
Author: Cece Mei <[email protected]>
AuthorDate: Thu Oct 15 15:14:21 2026 -0700

    docs: lookups are not subject to authorization (#20606)
    
    * auth
    
    * auth2
---
 docs/operations/security-user-auth.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docs/operations/security-user-auth.md 
b/docs/operations/security-user-auth.md
index acb3aebb688..80272a7bd43 100644
--- a/docs/operations/security-user-auth.md
+++ b/docs/operations/security-user-auth.md
@@ -81,6 +81,10 @@ This section describes the resource names available for each 
resource type.
 ### `DATASOURCE`
 Resource names for this type are datasource names. Specifying a datasource 
permission allows the administrator to grant users access to specific 
datasources.
 
+:::info
+Any authenticated user can read the contents of any 
[lookup](../querying/lookups.md). Avoid storing sensitive data in lookups.
+:::
+
 ### `CONFIG`
 There are two possible resource names for the "CONFIG" resource type, "CONFIG" 
and "security". Granting a user access to CONFIG resources allows them to 
access the following endpoints.
 


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to