[
https://issues.apache.org/jira/browse/KYLIN-6099?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18121769#comment-18121769
]
liyang commented on KYLIN-6099:
-------------------------------
Fixed by KYLIN-6093 (commit 8107cf1e9b). SparkSourceService now requires
global-admin authorization before SQL execution and table deletion. Closing as
fixed.
> Potential access-control issue in SparkSourceController
> -------------------------------------------------------
>
> Key: KYLIN-6099
> URL: https://issues.apache.org/jira/browse/KYLIN-6099
> Project: Kylin
> Issue Type: Bug
> Reporter: liyang
> Priority: Major
>
> Security issue reported for Apache Kylin. This public issue tracks
> remediation; technical details remain in the private ASF security process.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
