Skip to content

branch-4.0: [Feat](Snapshot) require root privilege for cluster snapshot commands #60239#61877

Closed
Yukang-Lian wants to merge 1 commit intoapache:branch-4.0from
Yukang-Lian:pick-60239-branch-4.0
Closed

branch-4.0: [Feat](Snapshot) require root privilege for cluster snapshot commands #60239#61877
Yukang-Lian wants to merge 1 commit intoapache:branch-4.0from
Yukang-Lian:pick-60239-branch-4.0

Conversation

@Yukang-Lian
Copy link
Copy Markdown
Collaborator

picked from #60239

…apache#60239)

Cluster snapshot operations are currently restricted to root user only.
Some customers need to allow ADMIN users to manage cluster snapshots
without granting root access.
Solution
Add a new configuration cluster_snapshot_min_privilege to control the
minimum privilege level:
- root (default): Only root user can execute
- admin: Users with ADMIN privilege can execute
Affects 4 cluster snapshot commands and 2 information_schema tables
(cluster_snapshots, cluster_snapshot_properties).
@Yukang-Lian Yukang-Lian requested a review from yiguolei as a code owner March 30, 2026 08:05
@hello-stephen
Copy link
Copy Markdown
Contributor

Thank you for your contribution to Apache Doris.
Don't know what should be done next? See How to process your PR.

Please clearly describe your PR:

  1. What problem was fixed (it's best to include specific error reporting information). How it was fixed.
  2. Which behaviors were modified. What was the previous behavior, what is it now, why was it modified, and what possible impacts might there be.
  3. What features were added. Why was this function added?
  4. Which code was refactored and why was this part of the code refactored?
  5. Which functions were optimized and what is the difference before and after the optimization?

@Yukang-Lian
Copy link
Copy Markdown
Collaborator Author

run buildall

@Yukang-Lian
Copy link
Copy Markdown
Collaborator Author

Superseded by #61920 (combined cherry-pick PR for branch-4.0)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants