You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@gravitino.apache.org by "zuotingbing (via GitHub)" <gi...@apache.org> on 2025/09/18 02:46:30 UTC

[D] when set gravitino.authorization.enable=true, why normal users without privilege can create catalogs? [gravitino]

GitHub user zuotingbing created a discussion: when set gravitino.authorization.enable=true, why normal users without privilege can create catalogs?

After I set gravitino.authorization.enable=true, normal users without privilege can create catalogs, why? 
The specific operations are as follows:
1. create a metalake named test
curl -L 'http://localhost:8090/api/metalakes' \
-H 'Content-Type: application/json' \
-H 'Accept: application/vnd.gravitino.v1+json' \
-d '{
  "name": "test",
  "comment": "test metalake",
  "properties": {}
}'

2. add a normal user Staff to the metalake
curl -L 'http://localhost:8090/api/metalakes/test/users' \
-H 'Content-Type: application/json' \
-H 'Accept: application/vnd.gravitino.v1+json' \
-d '{
  "name": "Staff"
}'

3. user Staff creats catalog sucessfully without privilege
curl -u Staff: -L 'http://localhost:8090/api/metalakes/test/catalogs' \
-H 'Content-Type: application/json' \
-H 'Accept: application/vnd.gravitino.v1+json' \
-d '{
  "name": "iceberg_catalog",
  "type": "relational",
  "provider": "lakehouse-iceberg",
  "comment": "test iceberg catalog",
  "properties": {
    "uri": "http://localhost:9001/iceberg",
    "catalog-backend": "rest"
  }
}'


GitHub link: https://github.com/apache/gravitino/discussions/8598

----
This is an automatically sent email for dev@gravitino.apache.org.
To unsubscribe, please send an email to: dev-unsubscribe@gravitino.apache.org

Re: [D] when set gravitino.authorization.enable=true, why normal users without privilege can create catalogs? [gravitino]

Posted by "jerqi (via GitHub)" <gi...@apache.org>.

GitHub user jerqi added a comment to the discussion: when set gravitino.authorization.enable=true, why normal users without privilege can create catalogs?

This will be supported in version 1.0.0.

GitHub link: https://github.com/apache/gravitino/discussions/8598#discussioncomment-14437687

----
This is an automatically sent email for dev@gravitino.apache.org.
To unsubscribe, please send an email to: dev-unsubscribe@gravitino.apache.org

Re: [D] when set gravitino.authorization.enable=true, why normal users without privilege can create catalogs? [gravitino]

Posted by "zuotingbing (via GitHub)" <gi...@apache.org>.

GitHub user zuotingbing added a comment to the discussion: when set gravitino.authorization.enable=true, why normal users without privilege can create catalogs?

Thanks for your reply. use 0.8.0 or the latest 0.9.1.

GitHub link: https://github.com/apache/gravitino/discussions/8598#discussioncomment-14437563

----
This is an automatically sent email for dev@gravitino.apache.org.
To unsubscribe, please send an email to: dev-unsubscribe@gravitino.apache.org

Re: [D] when set gravitino.authorization.enable=true, why normal users without privilege can create catalogs? [gravitino]

Posted by "zuotingbing (via GitHub)" <gi...@apache.org>.

GitHub user zuotingbing added a comment to the discussion: when set gravitino.authorization.enable=true, why normal users without privilege can create catalogs?

ok, thanks a lot. 

GitHub link: https://github.com/apache/gravitino/discussions/8598#discussioncomment-14438583

----
This is an automatically sent email for dev@gravitino.apache.org.
To unsubscribe, please send an email to: dev-unsubscribe@gravitino.apache.org

Re: [D] when set gravitino.authorization.enable=true, why normal users without privilege can create catalogs? [gravitino]

Posted by "jerqi (via GitHub)" <gi...@apache.org>.

GitHub user jerqi added a comment to the discussion: when set gravitino.authorization.enable=true, why normal users without privilege can create catalogs?

Which version do you use?

GitHub link: https://github.com/apache/gravitino/discussions/8598#discussioncomment-14437463

----
This is an automatically sent email for dev@gravitino.apache.org.
To unsubscribe, please send an email to: dev-unsubscribe@gravitino.apache.org