jnturton commented on PR #2713:
URL: https://github.com/apache/drill/pull/2713#issuecomment-1339255735

   @cgivre 
   > I guess my first question is whose permissions will these commands run 
under?  
   > Another thing to think about is making sure that users can't arbitrarily 
add this code somehow to a query.
   
   They'll run under the Drill process user. That user doesn't need much access 
to the OS but it generally will have lots of access, possibly including write, 
to data storage.
   
   > Another thing to think about is making sure that users can't arbitrarily 
add this code somehow to a query.
   
   Can't table functions set format config options but not storage config 
options?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@drill.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to