[
https://issues.apache.org/jira/browse/HAWQ-1249?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Chunling Wang closed HAWQ-1249.
-------------------------------
> Don't do ACL checks on segments
> -------------------------------
>
> Key: HAWQ-1249
> URL: https://issues.apache.org/jira/browse/HAWQ-1249
> Project: Apache HAWQ
> Issue Type: Sub-task
> Components: Security
> Reporter: Chunling Wang
> Assignee: Chunling Wang
> Fix For: 2.2.0.0-incubating
>
>
> HAWQ does ACL checks on segments, which we think is not necessary for QE
> because there is no catalog data on segments. Even a hacker can connect to a
> segdb with GP_ROLE_EXECUTE, he can not do any queries while he can do on
> Greenplum for there is catalog data on segments. Further more, in ranger
> checks, if all segments do same checks as master with RPS, it costs a lot and
> effects the performance.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
