[
https://issues.apache.org/jira/browse/KYLIN-6093?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18110173#comment-18110173
]
ASF subversion and git services commented on KYLIN-6093:
--------------------------------------------------------
Commit 8107cf1e9bceaa54a20d0b8522625847222e0fb3 in kylin's branch
refs/heads/kylin5 from jlfsdtc
[ https://gitbox.apache.org/repos/asf?p=kylin.git;h=8107cf1e9b ]
KYLIN-6093 Add permission checks to job, DDL, blacklist, metastore cleanup and
metadata dump APIs
* KYLIN-6093 Add permission checks to job, DDL, blacklist and metadata dump APIs
Enforce ACL at the service layer instead of relying on controllers:
- Require global admin for job list/count without a project, Spark DDL
execute/dropTable and metadata dump
- Require project operation permission for batch job status update,
discardJobs and destroyJobProcess
- Require project write permission for SQL blacklist operations
- Move forwardRequestToTargetNode from BaseController to BasicService, and
move remoteUpdateJobStatus / metadata dump logic from JobController into
JobInfoService and JobService so the checks cannot be bypassed
Also run maven-help-plugin offline in exportProjectVersions.
Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
* KYLIN-6093 Add permission checks to metastore cleanup APIs
Remove permitAll from /api/metastore/cleanup and /api/metastore/cleanup_storage
in kylinSecurity.xml, and enforce global/project admin checks in
MetaStoreService.
Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
---------
Co-authored-by: Claude Opus 5 (1M context) <[email protected]>
> Add Acl Or User Check In Rest API
> ---------------------------------
>
> Key: KYLIN-6093
> URL: https://issues.apache.org/jira/browse/KYLIN-6093
> Project: Kylin
> Issue Type: Bug
> Affects Versions: 5.0.0
> Reporter: Longfei Jiang
> Assignee: Longfei Jiang
> Priority: Major
>
> *Metastore Cleanup*
> - /api/metastore/cleanup
> - /api/metastore/cleanup_storage/tenant_node
> *Metadata Dump*
> - /api/system/metadata/dump
> *Query Sql Blacklist*
> - /api/query_sql_blacklist/${project}
> - /api/query_sql_blacklist/overwrite
> - /api/query_sql_blacklist/add_item/${project}
> - /api/query_sql_blacklist/update_item/${project}
> - /api/query_sql_blacklist/delete_item/${project} /${id}
> - /api/query_sql_blacklist/clear/${project}
> *Job Monitor*
> * /api/jobs post
> * /api/jobs/destroy_job_process
> * /api/jobs delete
> * /api/jobs/replace_metadata
> *Job Delegate*
> * /api/job_delegate/discard_job
> *Spark Source*
> * /api/spark_source/execute
> *
> /api/spark_source/${database}/tables/${table}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
