Impala Public Jenkins has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/11344 )
Change subject: IMPALA-7502: ALTER TABLE RENAME should require ALL on the old table ...................................................................... IMPALA-7502: ALTER TABLE RENAME should require ALL on the old table Prior to this patch, ALTER TABLE/VIEW RENAME required ALTER on the old table. This may pose a potential security risk, such as having ALTER on a table and ALL on a particular database allows a user to move the table to a database with ALL, which will automatically grant that user with ALL privilege on that table due to the privilege inherited from the database. This patch fixes the issue by requring ALL on the old table. What this means is moving a table to a database with ALL privilege will not elevate the privilege since ALL is now required for a table to be renamed. Testing: - Ran all FE tests Change-Id: I47a417a77df3f3030cf5f54fd2280b5e5e1fb77a Reviewed-on: http://gerrit.cloudera.org:8080/11344 Reviewed-by: Impala Public Jenkins <[email protected]> Tested-by: Impala Public Jenkins <[email protected]> --- M fe/src/main/java/org/apache/impala/analysis/AlterTableOrViewRenameStmt.java M fe/src/test/java/org/apache/impala/analysis/AuditingTest.java M fe/src/test/java/org/apache/impala/analysis/AuthorizationStmtTest.java 3 files changed, 57 insertions(+), 43 deletions(-) Approvals: Impala Public Jenkins: Looks good to me, approved; Verified -- To view, visit http://gerrit.cloudera.org:8080/11344 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: merged Gerrit-Change-Id: I47a417a77df3f3030cf5f54fd2280b5e5e1fb77a Gerrit-Change-Number: 11344 Gerrit-PatchSet: 4 Gerrit-Owner: Fredy Wijaya <[email protected]> Gerrit-Reviewer: Adam Holley <[email protected]> Gerrit-Reviewer: Csaba Ringhofer <[email protected]> Gerrit-Reviewer: Fredy Wijaya <[email protected]> Gerrit-Reviewer: Impala Public Jenkins <[email protected]> Gerrit-Reviewer: Vuk Ercegovac <[email protected]>
