[
https://issues.apache.org/jira/browse/IMPALA-7763?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16665918#comment-16665918
]
ASF subversion and git services commented on IMPALA-7763:
---------------------------------------------------------
Commit 8d628d7b62c4903bfd0236d2de150dae0752f0fe in impala's branch
refs/heads/master from [~aholley]
[ https://git-wip-us.apache.org/repos/asf?p=impala.git;h=8d628d7 ]
IMPALA-7710: test_owner_privileges_with_grant failed with AuthorizationException
The problem was acache consistency issue between impalad and catalogd.
Because a Sentry refresh was occuring during an update to privileges
from the alter table set owner, impalad had the correct privileges,
which allowed the "show grant role" to succeed but the privileges in
catalogd were being overwritten from the sentry refresh. Added a delay
in the drop call to ensure privileges are updated. This is a
workaround to get the tests to pass with the existing behaviour and
should be reassessed if IMPALA-7763 is implemented. This would add a
lock to possibly prevent this, but will need it's own assessment.
Testing:
- Ran custom cluster tests 50 times
Change-Id: I5a1babd3dcbb94ffaa1f3e6ef2cebf1a1d391219
Reviewed-on: http://gerrit.cloudera.org:8080/11786
Reviewed-by: Impala Public Jenkins <[email protected]>
Tested-by: Impala Public Jenkins <[email protected]>
> Consider locking principal/privilege update and Sentry refresh operations
> --------------------------------------------------------------------------
>
> Key: IMPALA-7763
> URL: https://issues.apache.org/jira/browse/IMPALA-7763
> Project: IMPALA
> Issue Type: Improvement
> Components: Catalog
> Affects Versions: Impala 3.1.0
> Reporter: Fredy Wijaya
> Priority: Major
>
> There's currently no lock between a Sentry refresh and any operations outside
> Sentry refresh for updating principal and privileges, which can cause the
> catalog to be temporarily inconsistent.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
