andyhuangdev opened a new pull request, #11502: URL: https://github.com/apache/ozone/pull/11502
## What changes were proposed in this pull request? This patch adds an administrator authorization check to OMInterServiceProtocolServerSideImpl.bootstrap() before adding an OM to the Ratis ring, consistent with the checks in decommission() and getOMConfiguration(). The check uses the existing admin authorization helpers and error response handling. Normal bootstrap already calls getOMConfiguration() with administrator privileges before requesting membership changes. When admin authorization is disabled, behavior remains unchanged. No configuration or Protobuf changes are required. A regression test verifies that non-admin bootstrap callers are rejected. The existing bootstrap test now enables admin authorization to verify that legitimate OMs can still join. ## What is the link to the Apache JIRA [HDDS-16842](https://issues.apache.org/jira/browse/HDDS-16842) ## How was this patch tested? The new bootstrapNonAdminIsDenied regression test was run before the fix and failed because the expected authorization denial was missing. After the fix, all tests passed: - TestOMAdminRpcAuthorization: 5 tests - TestAddRemoveOzoneManager: 8 tests - TestOMInstallSnapshotDuringBootstrapping: 1 test - TestOMAdminProtocolServerSideImpl: 1 test The project checkstyle script completed with zero violations, and git diff --check passed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
