Impala Public Jenkins has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/10923 )
Change subject: IMPALA-7059: Inconsistent privilege between DESCRIBE and DESCRIBE DATABASE ...................................................................... IMPALA-7059: Inconsistent privilege between DESCRIBE and DESCRIBE DATABASE In DESCRIBE DATABASE, having VIEW_METADATA privilege allows seeing the metadata information on the target database. Similarly, other SQL show commands require VIEW_METADATA privilege on the target database/table. In the prior code, DESCRIBE requires SELECT privilege on the target table and is inconsistent with the rest of other SQL metadata commands. The patch fixes the inconsistency by requiring DESCRIBE to use VIEW_METADATA privilege. Testing: - Updated authorization tests - Ran all FE tests Change-Id: I37d1610a922741a6c95059c3beb7d04eb507783f Reviewed-on: http://gerrit.cloudera.org:8080/10923 Reviewed-by: Impala Public Jenkins <impala-public-jenk...@cloudera.com> Tested-by: Impala Public Jenkins <impala-public-jenk...@cloudera.com> --- M fe/src/main/java/org/apache/impala/service/Frontend.java M fe/src/test/java/org/apache/impala/analysis/AuthorizationStmtTest.java 2 files changed, 26 insertions(+), 34 deletions(-) Approvals: Impala Public Jenkins: Looks good to me, approved; Verified -- To view, visit http://gerrit.cloudera.org:8080/10923 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: merged Gerrit-Change-Id: I37d1610a922741a6c95059c3beb7d04eb507783f Gerrit-Change-Number: 10923 Gerrit-PatchSet: 5 Gerrit-Owner: Fredy Wijaya <fwij...@cloudera.com> Gerrit-Reviewer: Adam Holley <ahol...@cloudera.com> Gerrit-Reviewer: Fredy Wijaya <fwij...@cloudera.com> Gerrit-Reviewer: Impala Public Jenkins <impala-public-jenk...@cloudera.com> Gerrit-Reviewer: Vuk Ercegovac <vercego...@cloudera.com>
