lasdf1234 opened a new pull request, #12774:
URL: https://github.com/apache/gravitino/pull/12774
### What changes were proposed in this pull request?
- Add `enabled` to `idp_user_meta` (MySQL/H2/PostgreSQL 2.0.0 schema and
1.3.0 → 2.0.0 upgrades).
- Thread the flag through PO, SQL providers, service, model, DTO, REST,
OpenAPI, and docs.
- Create: optional `enabled`, default `true`. Update: `PUT
/api/idp/users/{user}/enabled`.
- Disabled users cannot authenticate (same unauthorized message as a bad
password).
- Add `idp_group_meta.group_comment` (`VARCHAR(1024) DEFAULT ''`) to the
1.3.0 → 2.0.0 upgrades so they match the 2.0.0 schema. Do not add `external_id`
to IdP tables.
### Why are the changes needed?
Metalake `user_meta` already has `enabled`. Local HTTP Basic identities need
the same control so an administrator can lock a user out without deleting the
account. Fresh 2.0.0 installs already have `group_comment` on `idp_group_meta`;
the upgrade path did not.
Fix: #12773
### Does this PR introduce _any_ user-facing change?
- Yes. `POST /api/idp/users` accepts optional `enabled` (default `true`).
- New `PUT /api/idp/users/{user}/enabled` with `{"enabled": false|true}`.
- User responses include `enabled`.
### How was this patch tested?
- `./gradlew :plugins:idp-basic:test -PskipITs`
- `./gradlew :docs:build`
Made with [Cursor](https://cursor.com)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
