[
https://issues.apache.org/jira/browse/IMPALA-9231?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17000515#comment-17000515
]
ASF subversion and git services commented on IMPALA-9231:
---------------------------------------------------------
Commit e081e42f684593f176e1f1989db26598d79aebbe in impala's branch
refs/heads/master from stiga-huang
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=e081e42 ]
IMPALA-9231: support customized privilege checks for SHOW visibility
In IMPALA-9002 we introduce a flag simplify_check_on_show_tables which
simplifies privilege checks for SHOW TABLES. Only tables with privileges
implying SELECT privilege will be shown.
This patch provides the same mechanism for SHOW DATABASES. Also augment
the flag to be a list of privilege names and rename it to
min_privilege_set_for_show_stmts. The default value is "any" which
remains the default behavior. If set to "select", only dbs/tables on
which the user has SELECT privilege will be shown. If set to
"select,insert", only dbs/tables on which the user has SELECT or INSERT
privilege will be shown.
Tests:
- Add tests in test_authorization.py
Change-Id: I631fc5c386a52f0a1f62182473be15fcc3dd8609
Reviewed-on: http://gerrit.cloudera.org:8080/14904
Reviewed-by: Impala Public Jenkins <impala-public-jenk...@cloudera.com>
Tested-by: Impala Public Jenkins <impala-public-jenk...@cloudera.com>
> Use simplified privilege checks for show databases
> --------------------------------------------------
>
> Key: IMPALA-9231
> URL: https://issues.apache.org/jira/browse/IMPALA-9231
> Project: IMPALA
> Issue Type: Improvement
> Reporter: Vihang Karajgaonkar
> Assignee: Quanlong Huang
> Priority: Major
>
> IMPALA-9002 introduced a new flag {{simplify_check_on_show_tables}} which
> enables reduced privilege checks for the {{show tables}} command. This
> approach can also be used for {{show databases}} command.
> We may need to rename the flag or introduce a new flag since the current flag
> suggests it applies for {{show tables}} command only.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org
For additional commands, e-mail: issues-all-h...@impala.apache.org
