-
Notifications
You must be signed in to change notification settings - Fork 3.7k
[enhance](auth)Remove restrictions on user creation and other operations when enabling ranger/LDAP #50139
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
Thank you for your contribution to Apache Doris. Please clearly describe your PR:
|
|
run buildall |
TPC-H: Total hot run time: 34481 ms |
TPC-DS: Total hot run time: 192003 ms |
ClickBench: Total hot run time: 29.81 s |
|
run buildall |
TPC-H: Total hot run time: 33898 ms |
TPC-DS: Total hot run time: 187055 ms |
ClickBench: Total hot run time: 28.97 s |
|
run feut |
|
PR approved by at least one committer and no changes requested. |
|
PR approved by anyone and no changes requested. |
…er_master # Conflicts: # fe/fe-core/src/main/java/org/apache/doris/analysis/CreateUserStmt.java
|
run buildall |
|
PR approved by at least one committer and no changes requested. |
TPC-H: Total hot run time: 33317 ms |
TPC-DS: Total hot run time: 185008 ms |
ClickBench: Total hot run time: 29.55 s |
FE UT Coverage ReportIncrement line coverage `` 🎉 |
…ons when enabling ranger/LDAP (apache#50139) - According to the current design of LDAP, if the user doesn't exist in LDAP, Doris will check again to see if the user exists internally. If there is, login will also be allowed. Therefore, creating users should not be prohibited pr for branch-2.1: apache#50137 doc pr: apache/doris-website#2557 # Conflicts: # fe/fe-core/src/main/java/org/apache/doris/nereids/trees/plans/commands/DropUserCommand.java # fe/fe-core/src/main/java/org/apache/doris/nereids/trees/plans/commands/info/CreateUserInfo.java
…ons when enabling ranger/LDAP (apache#50139) - According to the current design of LDAP, if the user doesn't exist in LDAP, Doris will check again to see if the user exists internally. If there is, login will also be allowed. Therefore, creating users should not be prohibited pr for branch-2.1: apache#50137 doc pr: apache/doris-website#2557 # Conflicts: # fe/fe-core/src/main/java/org/apache/doris/nereids/trees/plans/commands/DropUserCommand.java # fe/fe-core/src/main/java/org/apache/doris/nereids/trees/plans/commands/info/CreateUserInfo.java
What problem does this PR solve?
pr for branch-2.1: #50137
doc pr: apache/doris-website#2557
Issue Number: close #xxx
Related PR: #32538
Problem Summary:
Remove restrictions on user creation and other operations when enabling ranger/LDAP
Release note
Remove restrictions on user creation and other operations when enabling ranger/LDAP
Check List (For Author)
Test
The PR that restricts operations has not added a case, and the current PR is only the logic before revert
Behavior changed:
Does this need documentation?
Check List (For Reviewer who merge this PR)