Repository: incubator-hawq-docs Updated Branches: refs/heads/feature/ranger-integration 847a79955 -> 6ef62dabf
move create cast w/o function to hawq-native list Project: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/repo Commit: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/commit/6ef62dab Tree: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/tree/6ef62dab Diff: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/diff/6ef62dab Branch: refs/heads/feature/ranger-integration Commit: 6ef62dabf59900aee5a12f2d683840e006c1d183 Parents: 847a799 Author: Lisa Owen <lo...@pivotal.io> Authored: Wed Mar 29 13:53:20 2017 -0700 Committer: Lisa Owen <lo...@pivotal.io> Committed: Wed Mar 29 13:53:30 2017 -0700 ---------------------------------------------------------------------- markdown/ranger/ranger-policy-creation.html.md.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/blob/6ef62dab/markdown/ranger/ranger-policy-creation.html.md.erb ---------------------------------------------------------------------- diff --git a/markdown/ranger/ranger-policy-creation.html.md.erb b/markdown/ranger/ranger-policy-creation.html.md.erb index f3b73f6..9523c77 100644 --- a/markdown/ranger/ranger-policy-creation.html.md.erb +++ b/markdown/ranger/ranger-policy-creation.html.md.erb @@ -54,6 +54,7 @@ HAWQ *always* employs its native authorization for operations on its catalog. HA - operations on HAWQ catalog - HAWQ catalog-related built-in functions +- `CREATE CAST` command when function is NULL - `CREATE DATABASE`, `DROP DATABASE`, `createdb`, `dropdb` - `hawq filespace` - `CREATE`, `DROP`, or `ALTER` commands for resource queues @@ -71,7 +72,6 @@ When Ranger is enabled, HAWQ-Ranger authorization is employed for access to user In cases where an operation requires super-user privileges, HAWQ first performs a super-user check, then requests the Ranger access check. Those operations requiring super-user checks include: -- `CREATE CAST` command when function is NULL - `CREATE`, `DROP`, or `ALTER` commands that involve a foreign-data wrapper - `CREATE LANGUAGE`, `DROP LANGUAGE` for non-built-in languages - `CREATE FUNCTION` command for untrusted languages.