This is an automated email from the ASF dual-hosted git repository.
dzamo pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/drill-site.git
The following commit(s) were added to refs/heads/master by this push:
new e55477c Update docs about security.user.admins system opts.
e55477c is described below
commit e55477cfcef1e96ec50e33441af8a21ba02c66c1
Author: James Turton <[email protected]>
AuthorDate: Tue Feb 22 11:54:52 2022 +0200
Update docs about security.user.admins system opts.
---
.../securing-drill/030-roles-privileges.md | 32 +++++++++-------------
.../050-aggregate-and-aggregate-statistical.md | 4 +--
2 files changed, 15 insertions(+), 21 deletions(-)
diff --git a/_docs/en/configure-drill/securing-drill/030-roles-privileges.md
b/_docs/en/configure-drill/securing-drill/030-roles-privileges.md
index ed25435..4a4556e 100644
--- a/_docs/en/configure-drill/securing-drill/030-roles-privileges.md
+++ b/_docs/en/configure-drill/securing-drill/030-roles-privileges.md
@@ -3,18 +3,19 @@ title: "Roles and Privileges"
slug: "Roles and Privileges"
parent: "Securing Drill"
---
+
Drill has two roles that perform different functions:
-* User (USER) role
-* Administrator (ADMIN) role
+- User (USER) role
+- Administrator (ADMIN) role
-## User Role
+## User role
Users can execute queries on data that he/she has access to. Each storage
plugin manages the read/write permissions. Users can create views on top of
data to provide granular access to that data.
-## Administrator Role
+## Administrator role
-When authentication is enabled, only Drill users who are assigned Drill
cluster administrator privileges can perform the following tasks:
+When authentication is enabled, only Drill users who are assigned Drill
cluster administrator privileges can perform the following tasks.
- Change system-level options by issuing the ALTER SYSTEM command.
- Update a storage plugin configuration through the REST API or Web UI.
@@ -22,24 +23,17 @@ When authentication is enabled, only Drill users who are
assigned Drill cluster
- View profiles of all queries that all users have run or are currently
running in a cluster.
- Cancel running queries that were launched by any user in the cluster.
-### Initial Admin Identity
+When authentication is disabled anyone can perform the tasks above.
-To configure an initial Admin User and Group add an `security.admin`
configuration entry like below into your `drill-override.conf` .
+### Specifying administrator users and groups
- drill.exec: {
- ...
- },
- security.admin: {
- users: "drill",
- user_groups: "hadoop"
- }
+Drill administrators can specified using two system options.
-Set the value of this options to a comma-separated list of user or group names
who you want to give administrator privileges, such as changing system options.
+| Option | Default | Description
|
+| -------------------------- | ------------------------------ |
--------------------------------------------------- |
+| security.admin.user_groups | Drill process user | A
comma-separated list of administrator groups. |
+| security.admin.users | Drill process user's OS groups | A
comma-separated list of administrator user names. |
The groups in `security.admin.user_groups` refer to groups in the configured
Hadoop group mapping service which defaults to looking up local operating
system groups. See [Hadoop Groups
Mapping](https://hadoop.apache.org/docs/stable/hadoop-project-dist/hadoop-common/GroupsMapping.html)
for more information.
See [Configuring Web UI and REST API
Security]({{site.baseurl}}/docs/configuring-web-ui-and-rest-api-security/) for
more information.
-
-
-
-
diff --git
a/_docs/en/sql-reference/sql-functions/050-aggregate-and-aggregate-statistical.md
b/_docs/en/sql-reference/sql-functions/050-aggregate-and-aggregate-statistical.md
index bcd23ec..5348ced 100644
---
a/_docs/en/sql-reference/sql-functions/050-aggregate-and-aggregate-statistical.md
+++
b/_docs/en/sql-reference/sql-functions/050-aggregate-and-aggregate-statistical.md
@@ -26,11 +26,11 @@ queries.
- AVG, COUNT, MIN, MAX, and SUM accept ALL and DISTINCT keywords. The default
is
ALL.
- The aggregate function examples use the `cp` storage plugin to access the
- [`employee.json`](%7B%7Bsite.baseurl%7D%7D/docs/querying-json-files/) file
+ [`employee.json`]({{site.baseurl}}/docs/querying-json-files/) file
installed with Drill. By default, JSON reads numbers as double-precision
floating point numbers. These examples assume that you are using the default
option
-
[all_text_mode](%7B%7Bsite.baseurl%7D%7D/docs/json-data-model/#handling-type-differences)
+
[all_text_mode]({{site.baseurl}}/docs/json-data-model/#handling-type-differences)
set to false.
## ANY_VALUE
