Hongxu Ma created HAWQ-1279:
-------------------------------

             Summary: Force to recompute namespace_path when enable_ranger
                 Key: HAWQ-1279
                 URL: https://issues.apache.org/jira/browse/HAWQ-1279
             Project: Apache HAWQ
          Issue Type: Sub-task
            Reporter: Hongxu Ma
            Assignee: Ed Espino


namespace_path is cached in each psql session and it the cache invalidation is 
triggered by Grant/Revoke SQL.

When enable_ranger, Grant/Revoke SQL is no longer use, so the cache prevent a 
ack-check request sending.

Example:
```
// create table t(i int); => failed
[{""resource"":{""database"":""postgres"",""schema"":""pg_catalog""},""privileges"":[""usage""],""allowed"":true}]
[{""resource"":{""database"":""postgres"",""schema"":""pg_catalog""},""privileges"":[""usage""],""allowed"":true}]
[{""resource"":{""database"":""postgres"",""schema"":""public""},""privileges"":[""usage""],""allowed"":false}]

// grant usage and create permissions to public schema in ranger and try again 
=> failed again
[{""resource"":{""database"":""postgres"",""schema"":""pg_catalog""},""privileges"":[""usage""],""allowed"":true}]
[{""resource"":{""database"":""postgres"",""schema"":""pg_catalog""},""privileges"":[""usage""],""allowed"":true}]
// why not send a request for USAGE??
```



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to