Impala Public Jenkins has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/14867 )
Change subject: IMPALA-9222: Speed up show tables/DBs if the user has access to parent db/server ...................................................................... IMPALA-9222: Speed up show tables/DBs if the user has access to parent db/server Currently we always do the auth check for tables/dbs individually. If the user has privileges higher in the hierarchy then it is not necessary to do these checks as they will all succeed. This change adds a higher level check before the individual checks. The optimization is only enabled for Sentry, as Ranger has deny policies, so server/db level access does not guarantee db/table level access. Testing: - the existing auth related test coverage seems enough - there are no tests for deny policies yet - adding them seems a bigger task so I created a follow up jira: IMPALA-9252 Change-Id: Ic1f5c5d1cf447a9f1cec46c45272f250b8580826 Reviewed-on: http://gerrit.cloudera.org:8080/14867 Reviewed-by: Impala Public Jenkins <[email protected]> Tested-by: Impala Public Jenkins <[email protected]> --- M fe/src/main/java/org/apache/impala/service/Frontend.java 1 file changed, 53 insertions(+), 6 deletions(-) Approvals: Impala Public Jenkins: Looks good to me, approved; Verified -- To view, visit http://gerrit.cloudera.org:8080/14867 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: merged Gerrit-Change-Id: Ic1f5c5d1cf447a9f1cec46c45272f250b8580826 Gerrit-Change-Number: 14867 Gerrit-PatchSet: 13 Gerrit-Owner: Csaba Ringhofer <[email protected]> Gerrit-Reviewer: Csaba Ringhofer <[email protected]> Gerrit-Reviewer: Impala Public Jenkins <[email protected]> Gerrit-Reviewer: Quanlong Huang <[email protected]> Gerrit-Reviewer: Vihang Karajgaonkar <[email protected]>
