LuciferYang opened a new issue, #14415: URL: https://github.com/apache/gravitino/issues/14415
### Version main branch ### Describe what's wrong With `authentication.impersonation-enable=true`, `FilesetCatalogOperations` creates HDFS file systems on its own thread pool and passes `PrincipalUtils::getCurrentUserName` to `ImpersonationHDFSFileSystemProxy`. The supplier runs on the pool thread, and a pool thread keeps the `Subject` of the request that started it. A file system created there is therefore built as a proxy user for that earlier user, and Gravitino caches it under the current user's key. `testConnection` probes catalog locations on the same pool, so it can check an earlier user's permissions. ### How to reproduce Enable impersonation on an HDFS fileset catalog. Let user alice make the first requests, so they start the pool threads. Then let user bob create or load a fileset: the file system cached for bob proxies as alice, and bob's HDFS operations can run with alice's permissions until the cache entry expires. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
