feat(auth): authorize query-auth reads and carry the grant on the split - #758

Open

plusplusjiajia wants to merge 8 commits into

apache:mainfrom

plusplusjiajia:query-auth-carry-grant

Commits on Sep 15, 2026

feat(auth): authorize query-auth reads and carry the grant on the split
plusplusjiajia
committed
f72a000
feat(auth): ask the server on more read paths and cover nested and old-schema drift
plusplusjiajia
committed
cfb1132
feat(auth): ask the server on metadata paths
plusplusjiajia
committed
d8d89af
feat(auth): ask the server before the first write, verify the uuid behind a live false, and ask the branch
plusplusjiajia
committed
b1e23e3
test(auth): gate the file:// branch-schema tests off Windows
plusplusjiajia
committed
95e7f33
feat(auth): refuse engine-planned vector splits that carry the query-auth marker
plusplusjiajia
committed
7eba462
fix(auth): match nested fields by id and keep a refused retry from deleting committed files
plusplusjiajia
committed
43c3150
test(auth): cover the audit-log read's split-carried decision on the primary-key path
plusplusjiajia
committed
c3c3199