[
https://issues.apache.org/jira/browse/IMPALA-15048?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Fang-Yu Rao updated IMPALA-15048:
---------------------------------
Description:
We chould consider showing more information in {{{}SHOW CURRENT ROLES{}}}.
- After IMPALA-14954, we support the delegation of roles, and thus the grantee
of a role could either be an administrator or a non-administrator of the role.
- Moreover, a user could also be granted a role via the a group this user
belongs to.
It could be seen that given a role {{{}r{}}}, it's possible that the current
effective user belongs to 2 groups {{g_1}} and {{{}g_2{}}}, where the group
{{g_1}} is a role administrator of the role {{{}r{}}}, but the group {{g_2}} is
not a role administrator of the role r. To not lose this piece of information,
we may need 4 columns in the result of {{{}SHOW CURRENT ROLES{}}}:
- role_name.
- user_name, which is set to null if the role was granted via a group.
- group_name, which is set to null if the role was granted directly to the
user.
- grant_option.
was:
We chould consider showing more information in {{{}SHOW CURRENT ROLES{}}}.
- After IMPALA-14954, we support the delegation of roles, and thus the grantee
of a role could either be an administrator or a non-administrator for the role.
- Moreover, a user could also be granted a role via the a group this user
belongs to.
It could be seen that given a role {{{}r{}}}, it's possible that the current
effective user belongs to 2 groups {{g_1}} and {{{}g_2{}}}, where the group
{{g_1}} is a role administrator of the role {{{}r{}}}, but the group {{g_2}} is
not a role administrator of the role r. To not lose this piece of information,
we may need 4 columns in the result of {{{}SHOW CURRENT ROLES{}}}:
- role_name.
- user_name, which is set to null if the role was granted via a group.
- group_name, which is set to null if the role was granted directly to the
user.
- grant_option.
> Consider showing more information in SHOW CURRENT ROLES after IMPALA-14954
> --------------------------------------------------------------------------
>
> Key: IMPALA-15048
> URL: https://issues.apache.org/jira/browse/IMPALA-15048
> Project: IMPALA
> Issue Type: Task
> Reporter: Fang-Yu Rao
> Priority: Major
>
> We chould consider showing more information in {{{}SHOW CURRENT ROLES{}}}.
> - After IMPALA-14954, we support the delegation of roles, and thus the
> grantee of a role could either be an administrator or a non-administrator of
> the role.
> - Moreover, a user could also be granted a role via the a group this user
> belongs to.
> It could be seen that given a role {{{}r{}}}, it's possible that the current
> effective user belongs to 2 groups {{g_1}} and {{{}g_2{}}}, where the group
> {{g_1}} is a role administrator of the role {{{}r{}}}, but the group {{g_2}}
> is not a role administrator of the role r. To not lose this piece of
> information, we may need 4 columns in the result of {{{}SHOW CURRENT
> ROLES{}}}:
> - role_name.
> - user_name, which is set to null if the role was granted via a group.
> - group_name, which is set to null if the role was granted directly to the
> user.
> - grant_option.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
