feat(auth): authorize query-auth reads and carry the grant on the split - #758

Open

plusplusjiajia wants to merge 24 commits into

apache:mainfrom

plusplusjiajia:query-auth-carry-grant

Commits on Sep 16, 2026

feat(auth): authorize query-auth reads and carry the grant on the split
plusplusjiajia
committed
e310d13
feat(auth): ask the server on more read paths and cover nested and old-schema drift
plusplusjiajia
committed
63ae9da
feat(auth): ask the server on metadata paths
plusplusjiajia
committed
7b78cdc
feat(auth): ask the server before the first write, verify the uuid behind a live false, and ask the branch
plusplusjiajia
committed
4ea9147
test(auth): gate the file:// branch-schema tests off Windows
plusplusjiajia
committed
4719bba
feat(auth): refuse engine-planned vector splits that carry the query-auth marker
plusplusjiajia
committed
99a8f6c
fix(auth): match nested fields by id and keep a refused retry from deleting committed files
plusplusjiajia
committed
7f76c4e
test(auth): cover the audit-log read's split-carried decision on the primary-key path
plusplusjiajia
committed
4b40336
fix(auth): refuse an assembled query-auth handle at construction and leave selector validation to planning
plusplusjiajia
committed
5ee8530

Commits on Sep 19, 2026

Commits on Sep 20, 2026

Merge branch 'main' into query-auth-carry-grant, deciding the row-kind read from its splits
plusplusjiajia
committed
f405c07

Commits on Sep 21, 2026

Merge branch 'main' into query-auth-carry-grant, keeping the live checks beside the new scan validations
plusplusjiajia
committed
d4564f6

Commits on Sep 22, 2026

Commits on Sep 24, 2026

fix(catalog): stop refusing decorated names at load; a query-auth view is still refused where the grant is decided
plusplusjiajia
committed
62823d6

Commits on Sep 25, 2026

Commits on Sep 30, 2026

Merge branch 'main' into query-auth-carry-grant: planning keeps the grant and adds main's data-directory validation
plusplusjiajia
committed
fb80378