This is an automated email from the ASF dual-hosted git repository.
yiguolei pushed a commit to branch branch-2.1
in repository https://gitbox.apache.org/repos/asf/doris.git
The following commit(s) were added to refs/heads/branch-2.1 by this push:
new c3096cabe25 [Fix](executor)normal group not auth #34377
c3096cabe25 is described below
commit c3096cabe254dc35b864c908f537bf0a44ad20f7
Author: wangbo <wan...@apache.org>
AuthorDate: Thu May 2 15:16:38 2024 +0800
[Fix](executor)normal group not auth #34377
---
fe/fe-core/src/main/java/org/apache/doris/mysql/privilege/Auth.java | 6 ++++++
1 file changed, 6 insertions(+)
diff --git
a/fe/fe-core/src/main/java/org/apache/doris/mysql/privilege/Auth.java
b/fe/fe-core/src/main/java/org/apache/doris/mysql/privilege/Auth.java
index 59ff2da6bec..cd47128beed 100644
--- a/fe/fe-core/src/main/java/org/apache/doris/mysql/privilege/Auth.java
+++ b/fe/fe-core/src/main/java/org/apache/doris/mysql/privilege/Auth.java
@@ -61,6 +61,7 @@ import org.apache.doris.persist.LdapInfo;
import org.apache.doris.persist.PrivInfo;
import org.apache.doris.qe.ConnectContext;
import org.apache.doris.resource.Tag;
+import org.apache.doris.resource.workloadgroup.WorkloadGroupMgr;
import org.apache.doris.thrift.TPrivilegeStatus;
import com.google.common.base.Joiner;
@@ -386,6 +387,11 @@ public class Auth implements Writable {
readLock();
try {
Set<Role> roles = getRolesByUserWithLdap(currentUser);
+ // currently stream load not support ip based auth, so normal
should not auth temporary
+ // need remove later
+ if (WorkloadGroupMgr.DEFAULT_GROUP_NAME.equals(workloadGroupName))
{
+ return true;
+ }
for (Role role : roles) {
if (role.checkWorkloadGroupPriv(workloadGroupName, wanted)) {
return true;
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@doris.apache.org
For additional commands, e-mail: commits-h...@doris.apache.org
