Remove unused code (#2336)

diff --git a/src/common-booter/src/main/resources/kylinSecurity.xml b/src/common-booter/src/main/resources/kylinSecurity.xml
index f491a4f..5ebd4ca 100644
--- a/src/common-booter/src/main/resources/kylinSecurity.xml
+++ b/src/common-booter/src/main/resources/kylinSecurity.xml
@@ -252,7 +252,6 @@
             <scr:intercept-url pattern="/api/kg/health" access="permitAll"/>
             <scr:intercept-url pattern="/api/kg/health/**" access="permitAll"/>
             <scr:intercept-url pattern="/api/monitor/alert" access="hasRole('ROLE_ADMIN')"/>
-            <scr:intercept-url pattern="/api/user/update_user" access="permitAll"/>
             <scr:intercept-url pattern="/api/metastore/cleanup" access="permitAll"/>
             <scr:intercept-url pattern="/api/metastore/cleanup_storage" access="permitAll"/>
             <scr:intercept-url pattern="/api/epoch" access="permitAll"/>
diff --git a/src/common-server/src/main/java/org/apache/kylin/rest/config/SecurityConfig.java b/src/common-server/src/main/java/org/apache/kylin/rest/config/SecurityConfig.java
index 04f07ee..d78b11b 100644
--- a/src/common-server/src/main/java/org/apache/kylin/rest/config/SecurityConfig.java
+++ b/src/common-server/src/main/java/org/apache/kylin/rest/config/SecurityConfig.java
@@ -74,7 +74,7 @@
         http.authorizeRequests()
                 .antMatchers("/api/streaming_jobs/spark", "/api/streaming_jobs/stats",
                 "/api/streaming_jobs/dataflow/**", "/api/epoch/maintenance_mode", "/api/health", "/api/health/**",
-                "/api/prometheus", "/api/monitor/spark/prometheus", "/api/user/update_user", "/api/metastore/cleanup",
+                "/api/prometheus", "/api/monitor/spark/prometheus", "/api/metastore/cleanup",
                 "/api/metastore/cleanup_storage", "/api/epoch", "/api/broadcast/**", "/api/config/is_cloud",
                 "/api/system/license/file", "/api/system/license/content", "/api/system/license/trial",
                 "/api/system/license", "/api/system/diag/progress", "/api/system/roll_event_log",
diff --git a/src/common-service/src/test/resources/kylinSecurity.xml b/src/common-service/src/test/resources/kylinSecurity.xml
index 619a21b..930c58a 100644
--- a/src/common-service/src/test/resources/kylinSecurity.xml
+++ b/src/common-service/src/test/resources/kylinSecurity.xml
@@ -243,7 +243,6 @@
             <scr:intercept-url pattern="/api/kg/health" access="permitAll"/>
             <scr:intercept-url pattern="/api/kg/health/**" access="permitAll"/>
             <scr:intercept-url pattern="/api/monitor/alert" access="hasRole('ROLE_ADMIN')"/>
-            <scr:intercept-url pattern="/api/user/update_user" access="permitAll"/>
             <scr:intercept-url pattern="/api/metastore/cleanup" access="permitAll"/>
             <scr:intercept-url pattern="/api/metastore/cleanup_storage" access="permitAll"/>
             <scr:intercept-url pattern="/api/epoch" access="permitAll"/>
diff --git a/src/core-common/src/main/java/org/apache/kylin/tool/restclient/RestClient.java b/src/core-common/src/main/java/org/apache/kylin/tool/restclient/RestClient.java
index d146830..63269f1 100644
--- a/src/core-common/src/main/java/org/apache/kylin/tool/restclient/RestClient.java
+++ b/src/core-common/src/main/java/org/apache/kylin/tool/restclient/RestClient.java
@@ -160,27 +160,6 @@
         return client.execute(post);
     }
 
-    public HttpResponse updateUser(Object object) throws IOException {
-        String url = baseUrl + "/user/update_user";
-        HttpPost post = newPost(url);
-        post.addHeader(ROUTED, "true");
-        String jsonMsg = JsonUtil.writeValueAsIndentString(object);
-        post.setEntity(new StringEntity(jsonMsg, "UTF-8"));
-        HttpResponse response = null;
-        try {
-            response = client.execute(post);
-            if (response.getStatusLine().getStatusCode() != HttpStatus.SC_OK) {
-                String msg = EntityUtils.toString(response.getEntity());
-                logger.error("Invalid response {} with update user {}\n{}", response.getStatusLine().getStatusCode(),
-                        url, msg);
-            }
-        } finally {
-            cleanup(post, response);
-            tryCatchUp();
-        }
-        return response;
-    }
-
     public HttpResponse updateSourceUsage() throws IOException {
         String url = baseUrl + "/broadcast/capacity/refresh_all";
         HttpPut put = newPut(url);
diff --git a/src/data-loading-booter/src/main/resources/config/init.properties b/src/data-loading-booter/src/main/resources/config/init.properties
index 141607e..5ded54c 100644
--- a/src/data-loading-booter/src/main/resources/config/init.properties
+++ b/src/data-loading-booter/src/main/resources/config/init.properties
@@ -494,7 +494,7 @@
 spring.session.store-type=none
 spring.cloud.nacos.config.server-addr=${NACOS_CONFIG_SERVER_ADDR_NO_HTTP}
 spring.cloud.nacos.discovery.service=data-loading
-kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/user/update_user,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**,/kylin/api/streaming_jobs/spark,/kylin/api/streaming_jobs/stats,/api/streaming_jobs/dataflow/**,/kylin/api/jobs/spark,/kylin/api/jobs/stage/status,/kylin/api/jobs/error,/api/jobs/wait_and_run_time,/kylin/api/system/clean_sparder_event_log
+kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**,/kylin/api/streaming_jobs/spark,/kylin/api/streaming_jobs/stats,/api/streaming_jobs/dataflow/**,/kylin/api/jobs/spark,/kylin/api/jobs/stage/status,/kylin/api/jobs/error,/api/jobs/wait_and_run_time,/kylin/api/system/clean_sparder_event_log
 kyligence.kyiam.sdk.security.gateway-path-filter.forbid-url=/kylin/api/job_delegate/**
 
 kylin.engine.spark-conf.spark.kubernetes.executor.podNamePrefix=sparder-data-loading
diff --git a/src/data-loading-booter/src/main/resources/config/init_min.properties b/src/data-loading-booter/src/main/resources/config/init_min.properties
index d2bb864..8afffc1 100644
--- a/src/data-loading-booter/src/main/resources/config/init_min.properties
+++ b/src/data-loading-booter/src/main/resources/config/init_min.properties
@@ -491,7 +491,7 @@
 spring.session.store-type=none
 spring.cloud.nacos.config.server-addr=${NACOS_CONFIG_SERVER_ADDR_NO_HTTP}
 spring.cloud.nacos.discovery.service=data-loading
-kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/user/update_user,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**,/kylin/api/streaming_jobs/spark,/kylin/api/streaming_jobs/stats,/api/streaming_jobs/dataflow/**,/kylin/api/jobs/spark,/kylin/api/jobs/stage/status,/kylin/api/jobs/error,/api/jobs/wait_and_run_time,/kylin/api/system/clean_sparder_event_log
+kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**,/kylin/api/streaming_jobs/spark,/kylin/api/streaming_jobs/stats,/api/streaming_jobs/dataflow/**,/kylin/api/jobs/spark,/kylin/api/jobs/stage/status,/kylin/api/jobs/error,/api/jobs/wait_and_run_time,/kylin/api/system/clean_sparder_event_log
 kyligence.kyiam.sdk.security.gateway-path-filter.forbid-url=/kylin/api/job_delegate/**
 
 kylin.engine.spark-conf.spark.kubernetes.executor.podNamePrefix=sparder-data-loading
diff --git a/src/data-loading-booter/src/main/resources/kylinSecurity.xml b/src/data-loading-booter/src/main/resources/kylinSecurity.xml
index 1a26e60..e9a8dd2 100644
--- a/src/data-loading-booter/src/main/resources/kylinSecurity.xml
+++ b/src/data-loading-booter/src/main/resources/kylinSecurity.xml
@@ -252,7 +252,6 @@
             <scr:intercept-url pattern="/api/kg/health" access="permitAll"/>
             <scr:intercept-url pattern="/api/kg/health/**" access="permitAll"/>
             <scr:intercept-url pattern="/api/monitor/alert" access="hasRole('ROLE_ADMIN')"/>
-            <scr:intercept-url pattern="/api/user/update_user" access="permitAll"/>
             <scr:intercept-url pattern="/api/metastore/cleanup" access="permitAll"/>
             <scr:intercept-url pattern="/api/metastore/cleanup_storage" access="permitAll"/>
             <scr:intercept-url pattern="/api/epoch" access="permitAll"/>
diff --git a/src/metadata-server/src/main/java/org/apache/kylin/rest/controller/NUserController.java b/src/metadata-server/src/main/java/org/apache/kylin/rest/controller/NUserController.java
index 43d8cef..822b777 100644
--- a/src/metadata-server/src/main/java/org/apache/kylin/rest/controller/NUserController.java
+++ b/src/metadata-server/src/main/java/org/apache/kylin/rest/controller/NUserController.java
@@ -522,14 +522,6 @@
         return response;
     }
 
-    @ApiOperation(value = "updateUser", tags = { "MID" })
-    @PostMapping(value = "/update_user")
-    @ResponseBody
-    public EnvelopeResponse<UserDetails> updateUserWithoutAuth(@RequestBody ManagedUser user) {
-        userService.updateUser(user);
-        return new EnvelopeResponse<>(KylinException.CODE_SUCCESS, null, "");
-    }
-
     @ApiOperation(value = "authentication", tags = { "MID" })
     @GetMapping(value = "/authentication", produces = { HTTP_VND_APACHE_KYLIN_JSON,
             HTTP_VND_APACHE_KYLIN_V4_PUBLIC_JSON })
diff --git a/src/ops-booter/src/main/resources/config/init.properties b/src/ops-booter/src/main/resources/config/init.properties
index 954eac8..68d3e5e 100644
--- a/src/ops-booter/src/main/resources/config/init.properties
+++ b/src/ops-booter/src/main/resources/config/init.properties
@@ -456,7 +456,7 @@
 spring.session.store-type=none
 spring.cloud.nacos.config.server-addr=${NACOS_CONFIG_SERVER_ADDR_NO_HTTP}
 spring.cloud.nacos.discovery.service=ops
-kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/user/update_user,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**,/kylin/api/system/clean_sparder_event_log
+kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**,/kylin/api/system/clean_sparder_event_log
 kyligence.kyiam.sdk.security.gateway-path-filter.forbid-url=/kylin/api/job_delegate/**
 
 kylin.task.upload-gc-log-enabled=true
diff --git a/src/ops-booter/src/main/resources/config/init_min.properties b/src/ops-booter/src/main/resources/config/init_min.properties
index 9d6d211..87b9b75 100644
--- a/src/ops-booter/src/main/resources/config/init_min.properties
+++ b/src/ops-booter/src/main/resources/config/init_min.properties
@@ -457,7 +457,7 @@
 spring.session.store-type=none
 spring.cloud.nacos.config.server-addr=${NACOS_CONFIG_SERVER_ADDR_NO_HTTP}
 spring.cloud.nacos.discovery.service=ops
-kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/user/update_user,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**,/kylin/api/system/clean_sparder_event_log
+kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**,/kylin/api/system/clean_sparder_event_log
 kyligence.kyiam.sdk.security.gateway-path-filter.forbid-url=/kylin/api/job_delegate/**
 
 kylin.task.upload-gc-log-enabled=true
diff --git a/src/query-booter/src/main/resources/config/init.properties b/src/query-booter/src/main/resources/config/init.properties
index 825661c..04cbd3b 100644
--- a/src/query-booter/src/main/resources/config/init.properties
+++ b/src/query-booter/src/main/resources/config/init.properties
@@ -506,7 +506,7 @@
 spring.session.store-type=none
 spring.cloud.nacos.config.server-addr=${NACOS_CONFIG_SERVER_ADDR_NO_HTTP}
 spring.cloud.nacos.discovery.service=query
-kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/user/update_user,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**
+kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**
 kyligence.kyiam.sdk.security.gateway-path-filter.forbid-url=/kylin/api/job_delegate/**
 
 kylin.storage.columnar.spark-conf.spark.kubernetes.executor.podNamePrefix=sparder-query
diff --git a/src/query-booter/src/main/resources/config/init_min.properties b/src/query-booter/src/main/resources/config/init_min.properties
index 78cb2c6..b85b2e1 100644
--- a/src/query-booter/src/main/resources/config/init_min.properties
+++ b/src/query-booter/src/main/resources/config/init_min.properties
@@ -501,7 +501,7 @@
 spring.session.store-type=none
 spring.cloud.nacos.config.server-addr=${NACOS_CONFIG_SERVER_ADDR_NO_HTTP}
 spring.cloud.nacos.discovery.service=query
-kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/user/update_user,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**,/kylin/api/system/clean_sparder_event_log
+kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**,/kylin/api/system/clean_sparder_event_log
 kyligence.kyiam.sdk.security.gateway-path-filter.forbid-url=/kylin/api/job_delegate/**
 
 kylin.storage.columnar.spark-conf.spark.kubernetes.executor.podNamePrefix=sparder-query
diff --git a/src/query-booter/src/main/resources/kylinSecurity.xml b/src/query-booter/src/main/resources/kylinSecurity.xml
index 3cb8c3d..bbf156f 100644
--- a/src/query-booter/src/main/resources/kylinSecurity.xml
+++ b/src/query-booter/src/main/resources/kylinSecurity.xml
@@ -251,7 +251,6 @@
             <scr:intercept-url pattern="/api/kg/health" access="permitAll"/>
             <scr:intercept-url pattern="/api/kg/health/**" access="permitAll"/>
             <scr:intercept-url pattern="/api/monitor/alert" access="hasRole('ROLE_ADMIN')"/>
-            <scr:intercept-url pattern="/api/user/update_user" access="permitAll"/>
             <scr:intercept-url pattern="/api/metastore/cleanup" access="permitAll"/>
             <scr:intercept-url pattern="/api/metastore/cleanup_storage" access="permitAll"/>
             <scr:intercept-url pattern="/api/epoch" access="permitAll"/>
diff --git a/src/rec-booter/src/main/resources/config/init.properties b/src/rec-booter/src/main/resources/config/init.properties
index 6f966e9..a2ccdd4 100644
--- a/src/rec-booter/src/main/resources/config/init.properties
+++ b/src/rec-booter/src/main/resources/config/init.properties
@@ -475,7 +475,7 @@
 spring.session.store-type=none
 spring.cloud.nacos.config.server-addr=${NACOS_CONFIG_SERVER_ADDR_NO_HTTP}
 spring.cloud.nacos.discovery.service=smart
-kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/user/update_user,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**,/kylin/api/system/clean_sparder_event_log
+kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**,/kylin/api/system/clean_sparder_event_log
 kyligence.kyiam.sdk.security.gateway-path-filter.forbid-url=/kylin/api/job_delegate/**
 
 kylin.storage.columnar.spark-conf.spark.kubernetes.executor.podNamePrefix=sparder-smart
diff --git a/src/rec-booter/src/main/resources/config/init_min.properties b/src/rec-booter/src/main/resources/config/init_min.properties
index a41dbd9..85e9715 100644
--- a/src/rec-booter/src/main/resources/config/init_min.properties
+++ b/src/rec-booter/src/main/resources/config/init_min.properties
@@ -475,7 +475,7 @@
 spring.session.store-type=none
 spring.cloud.nacos.config.server-addr=${NACOS_CONFIG_SERVER_ADDR_NO_HTTP}
 spring.cloud.nacos.discovery.service=smart
-kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/user/update_user,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**,/kylin/api/system/clean_sparder_event_log
+kyligence.kyiam.sdk.security.gateway-path-filter.ignore-url=/kylin/api/epoch/maintenance_mode,/kylin/api/prometheus,/kylin/api/metastore/cleanup,/kylin/api/metastore/cleanup_storage,/kylin/api/epoch,/kylin/api/config/is_cloud,/api/system/license/file,/kylin/api/system/license/content,/kylin/api/system/license/trial,/api/system/license,/kylin/api/system/diag/progress,/kylin/api/system/roll_event_log,/api/user/authentication*/**,/kylin/api/system/backup,/kylin/api/cubes/src/tables,/kylin/api/admin/public_config,/kylin/api/admin/instance_info,/kylin/api/projects,/kylin/api/system/license/info,/kylin/api/health,/kylin/api/health/**,/api/prometheus,/kylin/api/broadcast/**,/kylin/api/models/model_info,/kylin/api/**/metrics,/kylin/api/cache*/**,/kylin/api/system/clean_sparder_event_log
 kyligence.kyiam.sdk.security.gateway-path-filter.forbid-url=/kylin/api/job_delegate/**
 
 kylin.storage.columnar.spark-conf.spark.kubernetes.executor.podNamePrefix=sparder-smart
diff --git a/src/rec-booter/src/main/resources/kylinSecurity.xml b/src/rec-booter/src/main/resources/kylinSecurity.xml
index 05d6325..9f4134d 100644
--- a/src/rec-booter/src/main/resources/kylinSecurity.xml
+++ b/src/rec-booter/src/main/resources/kylinSecurity.xml
@@ -252,7 +252,6 @@
             <scr:intercept-url pattern="/api/kg/health" access="permitAll"/>
             <scr:intercept-url pattern="/api/kg/health/**" access="permitAll"/>
             <scr:intercept-url pattern="/api/monitor/alert" access="hasRole('ROLE_ADMIN')"/>
-            <scr:intercept-url pattern="/api/user/update_user" access="permitAll"/>
             <scr:intercept-url pattern="/api/metastore/cleanup" access="permitAll"/>
             <scr:intercept-url pattern="/api/metastore/cleanup_storage" access="permitAll"/>
             <scr:intercept-url pattern="/api/epoch" access="permitAll"/>
diff --git a/src/server/src/main/resources/kylinSecurity.xml b/src/server/src/main/resources/kylinSecurity.xml
index 6cd2085..acdccdf 100644
--- a/src/server/src/main/resources/kylinSecurity.xml
+++ b/src/server/src/main/resources/kylinSecurity.xml
@@ -256,7 +256,6 @@
             <scr:intercept-url pattern="/api/prometheus" access="permitAll"/>
             <scr:intercept-url pattern="/api/monitor/spark/prometheus" access="permitAll"/>
             <scr:intercept-url pattern="/api/monitor/alert" access="hasRole('ROLE_ADMIN')"/>
-            <scr:intercept-url pattern="/api/user/update_user" access="permitAll"/>
             <scr:intercept-url pattern="/api/metastore/cleanup" access="permitAll"/>
             <scr:intercept-url pattern="/api/metastore/cleanup_storage" access="permitAll"/>
             <scr:intercept-url pattern="/api/epoch" access="permitAll"/>
diff --git a/src/streaming-service/src/test/resources/kylinSecurity.xml b/src/streaming-service/src/test/resources/kylinSecurity.xml
index 91ef0bc..07007e6 100644
--- a/src/streaming-service/src/test/resources/kylinSecurity.xml
+++ b/src/streaming-service/src/test/resources/kylinSecurity.xml
@@ -251,7 +251,6 @@
             <scr:intercept-url pattern="/api/kg/health" access="permitAll"/>
             <scr:intercept-url pattern="/api/kg/health/**" access="permitAll"/>
             <scr:intercept-url pattern="/api/monitor/alert" access="hasRole('ROLE_ADMIN')"/>
-            <scr:intercept-url pattern="/api/user/update_user" access="permitAll"/>
             <scr:intercept-url pattern="/api/metastore/cleanup" access="permitAll"/>
             <scr:intercept-url pattern="/api/metastore/cleanup_storage" access="permitAll"/>
             <scr:intercept-url pattern="/api/epoch" access="permitAll"/>