feat(server): address pmc review comments

Author: LegendPei

.serena/memories/architecture_and_modules.md

@@ -5,19 +5,19 @@
 ### 1. Client Layer
 - Gremlin/Cypher queries, REST APIs, Swagger UI
 
-### 2. Server Layer (hugegraph-server, 13 submodules)
+### 2. Server Layer (hugegraph-server, 8 submodules)
 - **REST API** (hugegraph-api): GraphAPI, SchemaAPI, GremlinAPI, CypherAPI, AuthAPI, GraphSpaceAPI (distributed only), ManagerAPI (distributed only)
 - **Graph Engine** (hugegraph-core): Schema (with TTL update), traversal, task scheduling, GraphSpace multi-tenancy
 - **Backend Interface**: Pluggable via `BackendStore`
 
 ### 3. Storage Layer
 - RocksDB (default/embedded), HStore (distributed/production)
-- Legacy (≤1.5.0, deprecated, excluded from context): MySQL, PostgreSQL, Cassandra, ScyllaDB, HBase, Palo
+- HBase (deprecated; planned for removal in 2.0)
 
 ## Module Structure (7 top-level modules)
 
-### hugegraph-server (13 submodules)
-`hugegraph-core`, `hugegraph-api` (includes `opencypher/`, `space/`), `hugegraph-dist`, `hugegraph-test`, `hugegraph-example`, plus backends: `hugegraph-rocksdb`, `hugegraph-hstore`, `hugegraph-hbase`, `hugegraph-mysql`, `hugegraph-postgresql`, `hugegraph-cassandra`, `hugegraph-scylladb`, `hugegraph-palo`
+### hugegraph-server (8 submodules)
+`hugegraph-core`, `hugegraph-api` (includes `opencypher/`, `space/`), `hugegraph-dist`, `hugegraph-test`, `hugegraph-example`, plus backends: `hugegraph-rocksdb`, `hugegraph-hstore`, `hugegraph-hbase`
 
 ### hugegraph-pd (8 submodules)
 Placement Driver: `hg-pd-core`, `hg-pd-service`, `hg-pd-client`, `hg-pd-common`, `hg-pd-grpc`, `hg-pd-cli`, `hg-pd-dist`, `hg-pd-test`

.serena/memories/implementation_patterns_and_guidelines.md

@@ -4,8 +4,7 @@
 - Backends implement `BackendStore` interface from `hugegraph-core`
 - Each backend = separate Maven module under `hugegraph-server/`
 - Configured via `hugegraph.properties` → `backend` property
-- **Active backends (focus here)**: RocksDB (default/embedded), HStore (distributed)
-- **Legacy backends** (deprecated, excluded from Serena context): MySQL, PostgreSQL, Cassandra, ScyllaDB, HBase, Palo
+- **Supported backends**: RocksDB (default/embedded), HStore (distributed), HBase (deprecated; planned for removal in 2.0)
 
 ## GraphSpace Multi-Tenancy
 - Core: `hugegraph-core/.../space/` (GraphSpace, SchemaTemplate, Service, register/)

.serena/memories/project_overview.md

@@ -19,8 +19,7 @@ Apache HugeGraph is a fast-speed, highly-scalable graph database supporting 10+
 - **Graph Framework**: Apache TinkerPop 3.5.1
 - **RPC**: gRPC + Protocol Buffers
 - **API Docs**: Swagger (io.swagger.core.v3)
-- **Storage**: RocksDB (default/embedded), HStore (distributed/production)
-- **Legacy backends** (≤1.5.0): MySQL, PostgreSQL, Cassandra, ScyllaDB, HBase, Palo
+- **Storage**: RocksDB (default/embedded), HStore (distributed/production), HBase (deprecated; planned for removal in 2.0)
 
 ## Version
 - Current: 1.7.0 (`${revision}` property, Maven flatten plugin)

.serena/project.yml

@@ -35,12 +35,7 @@ ignore_all_files_in_gitignore: true
 # Same syntax as gitignore, so you can use * and **.
 # Note: global ignored_paths from serena_config.yml are also applied additively.
 ignored_paths:
-  # --- Deprecated backends (focus on RocksDB/HStore only) ---
-  - "hugegraph-server/hugegraph-cassandra/**"
-  - "hugegraph-server/hugegraph-scylladb/**"
-  - "hugegraph-server/hugegraph-mysql/**"
-  - "hugegraph-server/hugegraph-postgresql/**"
-  - "hugegraph-server/hugegraph-palo/**"
+  # --- HBase is deprecated and planned for removal in 2.0 ---
   - "hugegraph-server/hugegraph-hbase/**"
   # --- gRPC generated Java (235k lines, never hand-edited, regenerated by mvn compile) ---
   - "hugegraph-pd/hg-pd-grpc/src/main/java/**"

hugegraph-server/hugegraph-core/pom.xml

@@ -118,6 +118,11 @@
             <groupId>org.apache.tinkerpop</groupId>
             <artifactId>gremlin-driver</artifactId>
         </dependency>
+        <dependency>
+            <groupId>junit</groupId>
+            <artifactId>junit</artifactId>
+            <scope>test</scope>
+        </dependency>
         <dependency>
             <groupId>org.apache.fury</groupId>
             <artifactId>fury-core</artifactId>

hugegraph-server/hugegraph-core/src/main/java/org/apache/hugegraph/security/HugeSecurityManager.java

@@ -63,9 +63,7 @@ public class HugeSecurityManager extends SecurityManager {
             "line.separator",
             "file.separator",
             // Sofa
-            "java.specification.version",
-            "socksProxyHost",
-            "file.encoding"
+            "java.specification.version"
     );
 
     private static final Map<String, Set<String>> ASYNC_TASKS = ImmutableMap.of(

hugegraph-server/hugegraph-core/src/test/java/org/apache/hugegraph/security/HugeSecurityManagerTest.java

@@ -0,0 +1,40 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements.  See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hugegraph.security;
+
+import java.lang.reflect.Field;
+import java.util.Set;
+
+import org.junit.Assert;
+import org.junit.Test;
+
+public class HugeSecurityManagerTest {
+
+    @Test
+    public void testWhiteSystemPropertiesExcludeRemovedBackends() throws Exception {
+        Field field = HugeSecurityManager.class.getDeclaredField(
+                "WHITE_SYSTEM_PROPERTIES");
+        field.setAccessible(true);
+
+        @SuppressWarnings("unchecked")
+        Set<String> properties = (Set<String>) field.get(null);
+        Assert.assertFalse(properties.contains("socksProxyHost"));
+        Assert.assertFalse(properties.contains("file.encoding"));
+        Assert.assertTrue(properties.contains("java.specification.version"));
+    }
+}

hugegraph-server/hugegraph-dist/src/test/java/org/apache/hugegraph/cmd/InitStoreTest.java

@@ -46,16 +46,12 @@ public void testInitBackendFailsFastForPermanentException() throws Exception {
         Method method = InitStore.class.getDeclaredMethod("initBackend",
                                                           HugeGraph.class);
         method.setAccessible(true);
-        long start = System.nanoTime();
         try {
             method.invoke(null, graph);
             Assert.fail("Expected initialization to fail");
         } catch (InvocationTargetException e) {
             Assert.assertSame(exception, e.getCause());
         }
-        long elapsed = (System.nanoTime() - start) / 1_000_000L;
-        Assert.assertTrue("Expected initialization to fail without retrying",
-                          elapsed < 1000L);
         Assert.assertEquals(1, invocations.get());
     }
 }

hugegraph-server/hugegraph-test/src/main/java/org/apache/hugegraph/unit/core/SecurityManagerTest.java

@@ -282,6 +282,12 @@ public void testProperties() {
         System.getProperty("java.version");
         result = runGremlinJob("System.getProperty(\"java.version\")");
         assertError(result, "Not allowed to access system property(java.version) via Gremlin");
+
+        result = runGremlinJob("System.getProperty(\"socksProxyHost\")");
+        assertError(result, "Not allowed to access system property(socksProxyHost) via Gremlin");
+
+        result = runGremlinJob("System.getProperty(\"file.encoding\")");
+        assertError(result, "Not allowed to access system property(file.encoding) via Gremlin");
     }
 
     @Test