(iotdb) branch AuthEnhance updated: Push SUPER_USER down

[jackietien]

This is an automated email from the ASF dual-hosted git repository.

jackietien pushed a commit to branch AuthEnhance
in repository https://gitbox.apache.org/repos/asf/iotdb.git


The following commit(s) were added to refs/heads/AuthEnhance by this push:
     new abafe709d67 Push SUPER_USER down
abafe709d67 is described below

commit abafe709d6715cf3ccb64c26224d460ae91b8e5f
Author: JackieTien97 <jackietie...@gmail.com>
AuthorDate: Thu Sep 18 15:02:58 2025 +0800

    Push SUPER_USER down
---
 .../db/queryengine/plan/relational/security/AccessControlImpl.java     | 3 ---
 .../queryengine/plan/relational/security/TreeAccessCheckVisitor.java   | 3 +++
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git 
a/iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/relational/security/AccessControlImpl.java
 
b/iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/relational/security/AccessControlImpl.java
index 0e73a64564c..4b601b1c92c 100644
--- 
a/iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/relational/security/AccessControlImpl.java
+++ 
b/iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/relational/security/AccessControlImpl.java
@@ -366,9 +366,6 @@ public class AccessControlImpl implements AccessControl {
 
   @Override
   public TSStatus checkPermissionBeforeProcess(Statement statement, String 
userName) {
-    if (AuthorityChecker.SUPER_USER.equals(userName)) {
-      return new TSStatus(TSStatusCode.SUCCESS_STATUS.getStatusCode());
-    }
     return treeAccessCheckVisitor.process(statement, new 
TreeAccessCheckContext(userName));
   }
 }
diff --git 
a/iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/relational/security/TreeAccessCheckVisitor.java
 
b/iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/relational/security/TreeAccessCheckVisitor.java
index 2c836c1f23d..3bf3c92808f 100644
--- 
a/iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/relational/security/TreeAccessCheckVisitor.java
+++ 
b/iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/relational/security/TreeAccessCheckVisitor.java
@@ -173,6 +173,9 @@ public class TreeAccessCheckVisitor extends 
StatementVisitor<TSStatus, TreeAcces
   }
 
   private TSStatus checkSystemAuth(String userName) {
+    if (AuthorityChecker.SUPER_USER.equals(userName)) {
+      return new TSStatus(TSStatusCode.SUCCESS_STATUS.getStatusCode());
+    }
     return AuthorityChecker.getTSStatus(
         AuthorityChecker.checkSystemPermission(userName, PrivilegeType.SYSTEM),
         PrivilegeType.SYSTEM);