yuqi1129 opened a new issue, #11567:
URL: https://github.com/apache/gravitino/issues/11567

   ### Describe the subtask
   
   Enable the tag write tools (`create_tag`, `alter_tag`, `delete_tag`) that 
are currently disabled via `enabled=False`. With identity propagation in place, 
Gravitino's authorization layer enforces access control — a principal without 
the required grant will receive an explicit denial, which is a stronger 
governance story than tool-level hiding.
   
   **Changes:**
   - `mcp_server/tools/tag.py`: change `enabled=False` → `enabled=True` for 
`create_tag`, `alter_tag`, `delete_tag`; update comments to reflect 
authorization enforcement
   
   **Acceptance:**
   - The three tools are callable through MCP
   - A principal without write permission receives an authorization error from 
Gravitino (not a 404/tool-not-found)
   
   ### Parent issue
   
   TBD (EPIC to be linked after creation)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to