Fang-Yu Rao has posted comments on this change. ( 
http://gerrit.cloudera.org:8080/22716 )

Change subject: IMPALA-13011: Support authorization for Calcite in Impala
......................................................................


Patch Set 17:

(6 comments)

Hi all, I have tried to address Steve's comments on patch set 16.

In addition, I also changed/corrected how we register privilege requests when a 
view could be defined on top of other views to match what the classic Impala 
frontend does in this case.

Let me know if there are additional suggestions. Thanks!

http://gerrit.cloudera.org:8080/#/c/22716/16/fe/src/main/java/org/apache/impala/analysis/StmtMetadataLoader.java
File fe/src/main/java/org/apache/impala/analysis/StmtMetadataLoader.java:

http://gerrit.cloudera.org:8080/#/c/22716/16/fe/src/main/java/org/apache/impala/analysis/StmtMetadataLoader.java@83
PS16, Line 83:   // We should remove this after IMPALA-14295 is resolved.
> If I'm understanding correctly, this variable is only set because this feat
Sure. I created IMPALA-14295 (Support column masking and row filtering for 
Calcite planner) and will add the code comment here so we won't forget to 
remove this variable after IMPALA-14295 is fixed.


http://gerrit.cloudera.org:8080/#/c/22716/16/java/calcite-planner/src/main/java/org/apache/impala/calcite/schema/ImpalaViewTable.java
File 
java/calcite-planner/src/main/java/org/apache/impala/calcite/schema/ImpalaViewTable.java:

http://gerrit.cloudera.org:8080/#/c/22716/16/java/calcite-planner/src/main/java/org/apache/impala/calcite/schema/ImpalaViewTable.java@28
PS16, Line 28:   private final FeView table_;
> nit: final
Done


http://gerrit.cloudera.org:8080/#/c/22716/16/java/calcite-planner/src/main/java/org/apache/impala/calcite/service/ImpalaSqlValidatorImpl.java
File 
java/calcite-planner/src/main/java/org/apache/impala/calcite/service/ImpalaSqlValidatorImpl.java:

http://gerrit.cloudera.org:8080/#/c/22716/16/java/calcite-planner/src/main/java/org/apache/impala/calcite/service/ImpalaSqlValidatorImpl.java@91
PS16, Line 91:       // A view would be an instance of RelOptTableImpl if the 
view was created via
> I'm thinking that having the register* functions here just pollutes the Val
Sure. I will make the suggested change in the next patch set.


http://gerrit.cloudera.org:8080/#/c/22716/16/java/calcite-planner/src/main/java/org/apache/impala/calcite/service/ImpalaSqlValidatorImpl.java@95
PS16, Line 95:         FeView view = ((ImpalaViewTable) 
validatorTable.table()).getFeView();
> Nit: we don't need this if check anymore
Done


http://gerrit.cloudera.org:8080/#/c/22716/16/java/calcite-planner/src/main/java/org/apache/impala/calcite/service/ImpalaSqlValidatorImpl.java@124
PS16, Line 124:
> Can we just call registerTablePrivReqs rather than repeat this for loop or
I could try to create a method registerTablePrivReq() that registers the 
privilege request for a given TableName. This method will be used by both 
registerTablePrivReqs() and registerPrivReqsInView(). Hope this could make the 
code more concise.


http://gerrit.cloudera.org:8080/#/c/22716/16/java/calcite-planner/src/main/java/org/apache/impala/calcite/service/ImpalaSqlValidatorImpl.java@209
PS16, Line 209:
> Can we make reference to https://issues.apache.org/jira/browse/IMPALA-13095
Done



--
To view, visit http://gerrit.cloudera.org:8080/22716
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I9a7f7e4dc9a86a2da9e387832e552538e34029c1
Gerrit-Change-Number: 22716
Gerrit-PatchSet: 17
Gerrit-Owner: Fang-Yu Rao <fangyu....@cloudera.com>
Gerrit-Reviewer: Aman Sinha <amsi...@cloudera.com>
Gerrit-Reviewer: Fang-Yu Rao <fangyu....@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <impala-public-jenk...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <joemcdonn...@cloudera.com>
Gerrit-Reviewer: Michael Smith <michael.sm...@cloudera.com>
Gerrit-Reviewer: Riza Suminto <riza.sumi...@cloudera.com>
Gerrit-Reviewer: Steve Carlin <scar...@cloudera.com>
Gerrit-Comment-Date: Fri, 08 Aug 2025 23:57:35 +0000
Gerrit-HasComments: Yes

Reply via email to