Hi, I have a patch for https://issues.apache.org/jira/browse/IMPALA-10436 at https://gerrit.cloudera.org/c/17640/ that should be able to resolve the issue via introducing a new type of privilege recently supported by the Ranger service. I will resume working on this patch once I get the responses from the reviewers.
Best wishes, Fang-Yu On Sat, May 7, 2022 at 4:59 AM `曦 <285814...@qq.com> wrote: > hi, > In impala 4.0, I found that user with ALL database privileges on > SERVER may create external Kudu tables. is it by design? > > how should we handle the case where we have a policy with a non-ALL > database permission on create a Kudu table? > > > > > > gaoxiaoqing