[feat](authorization) introduce an authorization plugin SPI and move the Ranger sources out of fe-core - #66770

Open

morningman wants to merge 14 commits into

apache:masterfrom

morningman:wt-authorization

Commits on Aug 11, 2026

[feat](authorization) add fe-authorization-api with neutral data-policy payloads

morningman
and
claude
committed
fa766ba
[test](authorization) reproduce the SQL cache never hitting under Ranger data policies

morningman
and
claude
committed
10cb1bc
[improvement](authorization) hand row filters and column masks to the planner as SQL text

morningman
and
claude
committed
49ca062

Commits on Aug 12, 2026

[test](authorization) freeze today's access-control decisions in a golden matrix

morningman
and
claude
committed
5be4814
[improvement](authorization) let each controller decide its own global exemption

morningman
and
claude
committed
a4ea3a6
[improvement](authorization) route every access check through one decision

morningman
and
claude
committed
33c4b7f
[feat](authorization) make deciding access a contract a plugin can implement

morningman
and
claude
committed
6f84f52
[improvement](authorization) let the Ranger sources answer the plugin contract themselves
morningman
committed
0a21673
[feat](authorization) let an authorization source be installed from a directory

morningman
and
claude
committed
cdb0204
[test](authorization) prove a plugin installed from a directory really decides

morningman
and
claude
committed
9b0e12f

Commits on Aug 13, 2026