Skip to content

[Console] Add Spark application team-level permission checks#4395

Closed
shangeyao wants to merge 1 commit into
apache:devfrom
shangeyao:fix/spark-app-team-permission
Closed

[Console] Add Spark application team-level permission checks#4395
shangeyao wants to merge 1 commit into
apache:devfrom
shangeyao:fix/spark-app-team-permission

Conversation

@shangeyao

Copy link
Copy Markdown
Contributor

Summary

  • Extend PermissionAspect to resolve Spark applications when Flink lookup misses
  • Add @Permission team/app checks on SparkApplicationController endpoints, aligned with Flink

Fixes #4394

Test plan

  • Non-team member cannot start/cancel/delete another team's Spark app
  • Team member can operate Spark apps within their team
  • Admin bypass still works

AI Disclosure

  • Model: Claude Opus 4.6
  • Platform/Tool: Cursor
  • Human Oversight: partially reviewed
  • Prompt Summary: Implement Spark team isolation from dev branch scan

Made with Cursor

Extend PermissionAspect to validate Spark app ownership and add @Permission
annotations on SparkApplicationController endpoints.

Generated-by: Cursor
Co-authored-by: Cursor <cursoragent@cursor.com>
@shangeyao

Copy link
Copy Markdown
Contributor Author

Closing this PR because the StreamPark Console frontend is about to undergo a major refactor. These console-side changes would likely conflict with or require rework after the refactor. Will revisit relevant improvements once the new frontend architecture is in place.

@shangeyao shangeyao closed this Jun 30, 2026
@sonarqubecloud

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
4.7% Duplication on New Code (required ≤ 3%)

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Console] Add Spark application team-level permission checks

1 participant