[ https://issues.apache.org/jira/browse/HAWQ-1249?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Chunling Wang resolved HAWQ-1249. --------------------------------- Resolution: Fixed Fix Version/s: (was: backlog) 2.2.0.0-incubating > Don't do ACL checks on segments > ------------------------------- > > Key: HAWQ-1249 > URL: https://issues.apache.org/jira/browse/HAWQ-1249 > Project: Apache HAWQ > Issue Type: Sub-task > Components: Security > Reporter: Chunling Wang > Assignee: Chunling Wang > Fix For: 2.2.0.0-incubating > > > HAWQ does ACL checks on segments, which we think is not necessary for QE > because there is no catalog data on segments. Even a hacker can connect to a > segdb with GP_ROLE_EXECUTE, he can not do any queries while he can do on > Greenplum for there is catalog data on segments. Further more, in ranger > checks, if all segments do same checks as master with RPS, it costs a lot and > effects the performance. -- This message was sent by Atlassian JIRA (v6.3.4#6332)