Fang-Yu Rao created IMPALA-15048:
------------------------------------
Summary: Consider showing more information in SHOW CURRENT ROLES
after IMPALA-14954
Key: IMPALA-15048
URL: https://issues.apache.org/jira/browse/IMPALA-15048
Project: IMPALA
Issue Type: Task
Reporter: Fang-Yu Rao
Consider showing more information in {{{}SHOW CURRENT ROLES{}}}.
- After IMPALA-14954, we support the delegation of roles, and thus the grantee
of a role could either be an administrator or a non-administrator for the role.
- Moreover, a user could also be granted a role via the a group this user
belongs to.
It could be seen that given a role {{{}r{}}}, it's possible that the current
effective user belongs to 2 groups {{g_1}} and {{{}g_2{}}}, where the group
{{g_1}} is a role administrator of the role {{{}r{}}}, but the group {{g_2}} is
not a role administrator of the role r. To not lose this piece of information,
we may need 4 columns in the result of {{{}SHOW CURRENT ROLES{}}}:
- role_name.
- user_name, which is set to null if the role was granted via a group.
- group_name, which is set to null if the role was granted directly to the
user.
- grant_option.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
