jerryshao opened a new pull request, #14612: URL: https://github.com/apache/gravitino/pull/14612
### What changes were proposed in this pull request? Return HTTP 400 for invalid metadata object names and load-table privileges encountered during authorization. Validate all requested privileges, including invalid values following `MODIFY_TABLE`. Preserve HTTP 500 for unexpected internal errors. Add interceptor regression coverage for malformed job-run requests using the existing upstream fix. ### Why are the changes needed? Client validation errors can be wrapped as authorization internal errors and incorrectly return HTTP 500. Fixes #14610 This PR targets main; tag/policy association validation on branch-1.3 requires a separate fix. ### Does this PR introduce _any_ user-facing change? Invalid object names and privileges return HTTP 400 with the validation error instead of HTTP 500. Unknown privileges are consistently rejected regardless of their position in the list. ### How was this patch tested? - Added regression tests for invalid object names on tag/policy endpoints, invalid privileges, malformed job-run requests, and empty tag association bodies. - Passed 139 targeted authorization and REST tests after rebasing onto the latest main. - Independent review passed 65 targeted tests before the rebase. - Ran `./gradlew spotlessApply`, `:server:spotlessCheck`, and `git diff --check`. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
