yuqi1129 opened a new pull request, #13252: URL: https://github.com/apache/gravitino/pull/13252
### What changes were proposed in this pull request? Reuse entry authorization state for parent-scope checks and per-object list filtering in read-only REST requests. A scoped binding isolates principals, active roles, metalakes, and authorizers, restores nested scopes, and clears state when the request completes. Filter workers receive the context explicitly; mutation operations retain independent contexts. ### Why are the changes needed? Separate contexts repeat user and role-version lookups during one list request. Reusing the context lets filtering use state already loaded by entry authorization. Fix: #13251 ### Does this PR introduce _any_ user-facing change? No API or configuration changes. Authorization semantics remain unchanged. ### How was this patch tested? 139 targeted unit tests passed across server-common, server, and iceberg-rest-server. Tests cover context reuse through REST interceptors, parallel filtering with table denies, security-context isolation, nested scopes, exception cleanup, and JCasbin SQL-prefetch reuse with revalidation on the next request. Ran Spotless on the changed modules. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
