apache / apache/gravitino

improvement: If assign metalake owner to a user who isn't in the IDP, then no one can access the metalake again

Open
#10,901 2 comments 0 reactions 1 assignee Claimed by @roryqi View on GitHub
improvement
Dominant language
Java
Stars
3.2k
Forks
935
Avg merge
1d 16h
Merged PRs (30d)
298

Description

### Version

main branch

### Describe what's wrong

I use Keycloak as the IDP for gravitino, after assign the metalake owner to a wrong user who is not in the IDP, then I don't have a way to assign back because no legal user have the set owner permission.

### Error message and/or stacktrace

N/A

### How to reproduce

1. use Keycloak as the IDP for gravitino,
2. assign the metalake owner to a wrong user who is not in the IDP

### Additional context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.