[enhance](auth)Remove restrictions on user creation and other operations when enabling ranger/LDAP#50139
Merged
starocean999 merged 4 commits intoapache:masterfrom Jul 8, 2025
Merged
Conversation
Contributor
|
Thank you for your contribution to Apache Doris. Please clearly describe your PR:
|
Contributor
Author
|
run buildall |
TPC-H: Total hot run time: 34481 ms |
TPC-DS: Total hot run time: 192003 ms |
ClickBench: Total hot run time: 29.81 s |
Contributor
Author
|
run buildall |
TPC-H: Total hot run time: 33898 ms |
TPC-DS: Total hot run time: 187055 ms |
ClickBench: Total hot run time: 28.97 s |
Contributor
Author
|
run feut |
morrySnow
previously approved these changes
Jun 19, 2025
Contributor
|
PR approved by at least one committer and no changes requested. |
Contributor
|
PR approved by anyone and no changes requested. |
morningman
previously approved these changes
Jul 4, 2025
…er_master # Conflicts: # fe/fe-core/src/main/java/org/apache/doris/analysis/CreateUserStmt.java
Contributor
Author
|
run buildall |
morrySnow
approved these changes
Jul 8, 2025
Contributor
|
PR approved by at least one committer and no changes requested. |
TPC-H: Total hot run time: 33317 ms |
TPC-DS: Total hot run time: 185008 ms |
ClickBench: Total hot run time: 29.55 s |
Contributor
FE UT Coverage ReportIncrement line coverage `` 🎉 |
starocean999
approved these changes
Jul 8, 2025
zddr
added a commit
to zddr/incubator-doris
that referenced
this pull request
Jul 24, 2025
…ons when enabling ranger/LDAP (apache#50139) - According to the current design of LDAP, if the user doesn't exist in LDAP, Doris will check again to see if the user exists internally. If there is, login will also be allowed. Therefore, creating users should not be prohibited pr for branch-2.1: apache#50137 doc pr: apache/doris-website#2557 # Conflicts: # fe/fe-core/src/main/java/org/apache/doris/nereids/trees/plans/commands/DropUserCommand.java # fe/fe-core/src/main/java/org/apache/doris/nereids/trees/plans/commands/info/CreateUserInfo.java
zddr
added a commit
to zddr/incubator-doris
that referenced
this pull request
Jul 24, 2025
…ons when enabling ranger/LDAP (apache#50139) - According to the current design of LDAP, if the user doesn't exist in LDAP, Doris will check again to see if the user exists internally. If there is, login will also be allowed. Therefore, creating users should not be prohibited pr for branch-2.1: apache#50137 doc pr: apache/doris-website#2557 # Conflicts: # fe/fe-core/src/main/java/org/apache/doris/nereids/trees/plans/commands/DropUserCommand.java # fe/fe-core/src/main/java/org/apache/doris/nereids/trees/plans/commands/info/CreateUserInfo.java
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What problem does this PR solve?
pr for branch-2.1: #50137
doc pr: apache/doris-website#2557
Issue Number: close #xxx
Related PR: #32538
Problem Summary:
Remove restrictions on user creation and other operations when enabling ranger/LDAP
Release note
Remove restrictions on user creation and other operations when enabling ranger/LDAP
Check List (For Author)
Test
The PR that restricts operations has not added a case, and the current PR is only the logic before revert
Behavior changed:
Does this need documentation?
Check List (For Reviewer who merge this PR)