roryqi opened a new pull request, #12893:
URL: https://github.com/apache/gravitino/pull/12893

   ### What changes were proposed in this pull request?
   
   - Use the internal owner dispatcher when assigning ownership during metadata 
creation.
   - Use the internal access control dispatcher when adding a metalake creator.
   - Use the internal owner dispatcher for ownership checks during user, group, 
and bulk deletion.
   - Keep explicit owner REST operations on the public event dispatcher.
   
   ### Why are the changes needed?
   
   Nested ownership operations currently generate additional audit events, such 
as `SET_OWNER` after `CREATE_CATALOG`, even though they are part of one 
user-visible operation.
   
   Internal dispatchers preserve the ownership and authorization behavior 
without emitting separate audit events.
   
   Fix: #12892
   
   ### Does this PR introduce _any_ user-facing change?
   
   Yes. Internal ownership operations no longer produce separate audit log 
entries. Explicit `GET_OWNER` and `SET_OWNER` requests continue to be audited.
   
   ### How was this patch tested?
   
   - Updated hook dispatcher tests to use the internal owner and access control 
dispatchers.
   - Updated user, group, and bulk operation tests to use the internal owner 
dispatcher.
   - Ran the focused core hook dispatcher test suite.
   - Ran `TestUserOperations`, `TestGroupOperations`, and `TestBulkOperations`.
   - Ran Spotless for the core and server modules.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to