Fredy Wijaya has uploaded this change for review. ( http://gerrit.cloudera.org:8080/11344
Change subject: IMPALA-7502: ALTER TABLE RENAME should require ALL on the old table ...................................................................... IMPALA-7502: ALTER TABLE RENAME should require ALL on the old table Prior to this patch, ALTER TABLE/VIEW RENAME required ALTER on the old table. This may pose a potential security risk, such as having ALTER on a table and ALL on a particular database allows a user to move the table to a database with ALL, which will automatically grant that user with ALL privilege on that table due to the privilege inherited from the database. This patch fixes the issue by requring ALL on the old table. What this means is moving a table to a database with ALL privilege will not elevate the privilege since ALL is now required for a table to be renamed. Testing: - Ran all FE tests Change-Id: I47a417a77df3f3030cf5f54fd2280b5e5e1fb77a --- M fe/src/main/java/org/apache/impala/analysis/AlterTableOrViewRenameStmt.java M fe/src/test/java/org/apache/impala/analysis/AuditingTest.java M fe/src/test/java/org/apache/impala/analysis/AuthorizationStmtTest.java 3 files changed, 57 insertions(+), 43 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/44/11344/2 -- To view, visit http://gerrit.cloudera.org:8080/11344 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: I47a417a77df3f3030cf5f54fd2280b5e5e1fb77a Gerrit-Change-Number: 11344 Gerrit-PatchSet: 2 Gerrit-Owner: Fredy Wijaya <[email protected]>
