Fang-Yu Rao has uploaded this change for review. ( http://gerrit.cloudera.org:8080/21940
Change subject: IMPALA-12554: Create one Ranger policy for multi-column GRANT ...................................................................... IMPALA-12554: Create one Ranger policy for multi-column GRANT This patch makes Impala create only one Ranger policy for the GRANT statement when there are multiple columns specified to reduce the number of policies created on the Ranger server. Note that this patch relies on RANGER-4585 and RANGER-4638. Testing: - Manually verified that Impala's catalog daemon only sends one GrantRevokeRequest to the Ranger plug-in and that the value of the key 'column' is a comma-separated list of column names involved in the GRANT statement. - Added an end-to-end test to verify only one Ranger policy will be created in a multi-column GRANT statement. Change-Id: I2b0ebba256c7135b4b0d2160856202292d720c6d --- M fe/src/main/java/org/apache/impala/authorization/ranger/RangerCatalogdAuthorizationManager.java M fe/src/main/java/org/apache/impala/authorization/ranger/RangerImpalaResourceBuilder.java M tests/authorization/test_ranger.py 3 files changed, 128 insertions(+), 3 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/40/21940/1 -- To view, visit http://gerrit.cloudera.org:8080/21940 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: I2b0ebba256c7135b4b0d2160856202292d720c6d Gerrit-Change-Number: 21940 Gerrit-PatchSet: 1 Gerrit-Owner: Fang-Yu Rao <[email protected]>
