Bharath Vissapragada has uploaded a new change for review. http://gerrit.cloudera.org:8080/3520
Change subject: IMPALA-3797: Relax privilege requirements for creating/dropping functions ...................................................................... IMPALA-3797: Relax privilege requirements for creating/dropping functions Currently Impala expects an ALL privilege at the server level for creating or dropping functions. This is not reasonable because the user ends up getting many more undesirable grants apart from creating/dropping functions. To fix this, we change the grant model to the following - Creating functions now require an ALL privilege on the function URI - Dropping functions doesn't require any specific privileges The above rules make Impala's behavior consistent with Hive. Change-Id: Ibfe351f4b1575bdf61eeab8395efee834a16145c --- M fe/src/main/java/com/cloudera/impala/analysis/CreateFunctionStmtBase.java M fe/src/main/java/com/cloudera/impala/analysis/DropFunctionStmt.java M fe/src/test/java/com/cloudera/impala/analysis/AuthorizationTest.java M fe/src/test/resources/authz-policy.ini.template 4 files changed, 16 insertions(+), 27 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala refs/changes/20/3520/1 -- To view, visit http://gerrit.cloudera.org:8080/3520 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-MessageType: newchange Gerrit-Change-Id: Ibfe351f4b1575bdf61eeab8395efee834a16145c Gerrit-PatchSet: 1 Gerrit-Project: Impala Gerrit-Branch: cdh5-trunk Gerrit-Owner: Bharath Vissapragada <[email protected]>
