(iotdb) branch AuthEnhance updated: Correct Template

[jackietien]

This is an automated email from the ASF dual-hosted git repository.

jackietien pushed a commit to branch AuthEnhance
in repository https://gitbox.apache.org/repos/asf/iotdb.git


The following commit(s) were added to refs/heads/AuthEnhance by this push:
     new f7740a3d76f Correct Template
f7740a3d76f is described below

commit f7740a3d76f806d41107379c3da7a053be6b9294
Author: JackieTien97 <jackietie...@gmail.com>
AuthorDate: Thu Sep 18 12:26:14 2025 +0800

    Correct Template
---
 .../queryengine/plan/relational/security/TreeAccessCheckVisitor.java | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git 
a/iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/relational/security/TreeAccessCheckVisitor.java
 
b/iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/relational/security/TreeAccessCheckVisitor.java
index 7e474d83397..2c836c1f23d 100644
--- 
a/iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/relational/security/TreeAccessCheckVisitor.java
+++ 
b/iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/relational/security/TreeAccessCheckVisitor.java
@@ -189,8 +189,9 @@ public class TreeAccessCheckVisitor extends 
StatementVisitor<TSStatus, TreeAcces
   @Override
   public TSStatus visitSetSchemaTemplate(
       SetSchemaTemplateStatement setSchemaTemplateStatement, 
TreeAccessCheckContext context) {
-    // root.__audit can never be deleted
-    if 
(TREE_MODEL_AUDIT_DATABASE_PATH.equals(setSchemaTemplateStatement.getPath())) {
+    // root.__audit can never be set template
+    String[] nodes = setSchemaTemplateStatement.getPath().getNodes();
+    if (nodes.length >= 2 && 
TABLE_MODEL_AUDIT_DATABASE.equalsIgnoreCase(nodes[1])) {
       return new TSStatus(TSStatusCode.NO_PERMISSION.getStatusCode())
           .setMessage(String.format(READ_ONLY_DB_ERROR_MSG, 
TABLE_MODEL_AUDIT_DATABASE));
     }