Fang-Yu Rao created IMPALA-12554:
------------------------------------

             Summary: Create only one Ranger policy for GRANT statement
                 Key: IMPALA-12554
                 URL: https://issues.apache.org/jira/browse/IMPALA-12554
             Project: IMPALA
          Issue Type: Improvement
            Reporter: Fang-Yu Rao
            Assignee: Fang-Yu Rao


Currently Impala would create a Ranger policy for each column specified in a 
GRANT statement. For instance, after the following query, 3 Ranger policies 
would be created on the Ranger server. This could result in a lot of policies 
created when there are many columns specified and it may cause Impala's Ranger 
plug-in a long time to download the policies from the Ranger server. It would 
be great if Impala only creates one single policy for columns in the same table.
{code}
[localhost:21050] default> grant select(id, bool_col, tinyint_col) on table 
functional.alltypes to user non_owner;
Query: grant select(id, bool_col, tinyint_col) on table functional.alltypes to 
user non_owner
Query submitted at: 2023-11-10 09:38:58 (Coordinator: http://fangyu:25000)
Query progress can be monitored at: 
http://fangyu:25000/query_plan?query_id=bc4fa1cdefe5881b:413d9a6900000000
+---------------------------------+
| summary                         |
+---------------------------------+
| Privilege(s) have been granted. |
+---------------------------------+
Fetched 1 row(s) in 0.67s
{code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to