Chunling Wang created HAWQ-1249:
-----------------------------------
Summary: Don't do ACL checks on segments
Key: HAWQ-1249
URL: https://issues.apache.org/jira/browse/HAWQ-1249
Project: Apache HAWQ
Issue Type: Sub-task
Components: Security
Reporter: Chunling Wang
Assignee: Ed Espino
HAWQ does ACL checks on segments, which we think is not necessary for QE
because there is no catalog data on segments. Even a hacker can connect to a
segdb with GP_ROLE_EXECUTE, he can not do any queries while he can do on
Greenplum for there is catalog data on segments. Further more, in ranger
checks, if all segments do same checks as master with RPS, it costs a lot and
effects the performance.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
