Support custom error message in fine grained access control interface

apache / pinot

Apache Pinot - A realtime distributed OLAP datastore

https://pinot.apache.org/

Apache License 2.0

5.53k stars 1.3k forks source link

Open dang-stripe opened 4 months ago

dang-stripe commented 4 months ago

Currently the fine grained access control interface only returns a boolean true/false on whether access is denied. We'd like to have support for supplying a custom error message to propagate to the user that they can see it as part of the 403 response that's thrown here: https://github.com/apache/pinot/blob/master/pinot-core/src/main/java/org/apache/pinot/core/auth/FineGrainedAuthUtils.java#L128

Jackie-Jiang commented 3 months ago

The support is added in #13195. We need to move more APIs to use the new access control API