Skip to content

branch-4.1:[improvement](fe) Support LDAP default roles (#63411)#64114

Open
seawinde wants to merge 1 commit into
apache:branch-4.1from
seawinde:pr_63411_to_branch-4.1
Open

branch-4.1:[improvement](fe) Support LDAP default roles (#63411)#64114
seawinde wants to merge 1 commit into
apache:branch-4.1from
seawinde:pr_63411_to_branch-4.1

Conversation

@seawinde

@seawinde seawinde commented Jun 4, 2026

Copy link
Copy Markdown
Member

pr: #63411
commitId: 480a9c7

@seawinde seawinde requested a review from yiguolei as a code owner June 4, 2026 09:40
@hello-stephen

Copy link
Copy Markdown
Contributor

Thank you for your contribution to Apache Doris.
Don't know what should be done next? See How to process your PR.

Please clearly describe your PR:

  1. What problem was fixed (it's best to include specific error reporting information). How it was fixed.
  2. Which behaviors were modified. What was the previous behavior, what is it now, why was it modified, and what possible impacts might there be.
  3. What features were added. Why was this function added?
  4. Which code was refactored and why was this part of the code refactored?
  5. Which functions were optimized and what is the difference before and after the optimization?

@seawinde

seawinde commented Jun 4, 2026

Copy link
Copy Markdown
Member Author

run buildall

@hello-stephen

Copy link
Copy Markdown
Contributor

FE Regression Coverage Report

Increment line coverage 0.00% (0/19) 🎉
Increment coverage report
Complete coverage report

1 similar comment
@hello-stephen

Copy link
Copy Markdown
Contributor

FE Regression Coverage Report

Increment line coverage 0.00% (0/19) 🎉
Increment coverage report
Complete coverage report

Problem Summary:

LDAP temporary users could only receive roles mapped from LDAP groups
and the built-in information_schema-only role. This PR adds
`ldap_default_roles` so every LDAP-authenticated user can receive
configured Doris roles while still keeping LDAP group roles.

Support configuring default Doris roles for LDAP-authenticated users
through `ldap_default_roles`.
@yiguolei yiguolei force-pushed the pr_63411_to_branch-4.1 branch from 480a9c7 to 2ecca9a Compare June 17, 2026 01:26
@yiguolei

Copy link
Copy Markdown
Contributor

run buildall

@hello-stephen

Copy link
Copy Markdown
Contributor

FE UT Coverage Report

Increment line coverage 100.00% (19/19) 🎉
Increment coverage report
Complete coverage report

@hello-stephen

Copy link
Copy Markdown
Contributor

FE Regression Coverage Report

Increment line coverage 0.00% (0/22) 🎉
Increment coverage report
Complete coverage report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants