You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@polaris.apache.org by "visit2rahul (via GitHub)" <gi...@apache.org> on 2026/06/11 11:18:13 UTC

Re: [PR] Core: Extract shared credential rotation pre-condition check (Closes #4026) [polaris]

visit2rahul commented on PR #4420:
URL: https://github.com/apache/polaris/pull/4420#issuecomment-4679969516

   @sungwy @dimas-b -- following up on the open question from a few weeks back. @dimas-b's view is that `OpaPolarisAuthorizer` should enforce `ENFORCE_PRINCIPAL_CREDENTIAL_ROTATION_REQUIRED_CHECKING` at the Java layer, consistent with `PolarisAuthorizerImpl` and `RangerPolarisAuthorizer`. Happy to add that here -- just wanted @sungwy's read on whether Java-layer enforcement is the right approach for the OPA path, or if that check belongs in Rego policy. Everything else is addressed and CI is green. Thoughts?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org