GitHub user robertamarton opened a pull request:
https://github.com/apache/trafodion/pull/1561
TRAFODION-3046: Privilege support for native HBase tables
-- Grants and revokes against native HBase tables are enforced similar to
hive
-- Privilege checking added when creating and dropping native HBase tables
-- Removing dependent Trafodion metadata when native HBase tables are
dropped
-- Added regression test (privs2/TEST146)
-- Reorg - split PrivMgrComponents into 2 files:
PrivMgrComponents and PrivMgrUserPrivs
An hbase table can be referenced using one of the following types:
"_CELL_" - references cell data
"_ROW_" - references row data
"_MAP_" - references data defined by the mapped (external) table
Privileges are granted against each of these types, so if you:
select * from hbase."_CELL_".hbase1;
You must have the select privileges on this table
For example: "grant select on hbase."_CELL_".hbase1 to user1"
Likewise for other hbase types, grants are required to gain accessibility
grant select on hbase."_MAP_".hbase1 to user1
grant select on hbase."_ROW_".hbase1 to role1
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/robertamarton/incubator-trafodion hbase-privs
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/trafodion/pull/1561.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #1561
----
commit b178915d214d6bbdd5f7de49900f61a26abf652b
Author: Roberta Marton <roberta.marton@...>
Date: 2018-05-10T15:15:50Z
TRAFODION-3046: Privilege support for native HBase tables
-- Grants and revokes against native HBase tables are enforced similar to
hive
-- Privilege checking added when creating and dropping native HBase tables
-- Removing dependent Trafodion metadata when native HBase tables are
dropped
-- Added regression test (privs2/TEST146)
-- Reorg - split PrivMgrComponents into 2 files:
PrivMgrComponents and PrivMgrUserPrivs
An hbase table can be referenced using one of the following types:
"_CELL_" - references cell data
"_ROW_" - references row data
"_MAP_" - references data defined by the mapped (external) table
Privileges are granted against each of these types, so if you:
select * from hbase."_CELL_".hbase1;
You must have the select privileges on this table
For example: "grant select on hbase."_CELL_".hbase1 to user1"
Likewise for other hbase types, grants are required to gain accessibility
grant select on hbase."_MAP_".hbase1 to user1
grant select on hbase."_ROW_".hbase1 to role1
----
---
