Fang-Yu Rao has uploaded this change for review. ( http://gerrit.cloudera.org:8080/17639
Change subject: IMPALA-10436: Require lower privilege for external Kudu table creation ...................................................................... IMPALA-10436: Require lower privilege for external Kudu table creation After IMPALA-4000, creating an external Kudu table requires the requesting user to possess the ALL privilege on SERVER due to the fact that Kudu did not support authorization at that time. Such a requirement suffers from the drawback of having to grant more privileges than needed to the requesting user if we want to allow users other than Impala administrators to create external Kudu tables as well. Now that Kudu supports authorization, this patch relaxes such a requirement so that a requesting user is allowed to create an external Kudu table as long as the user is granted the CREATE privilege on the database where the external table will be created if 'kudu.master_addresses' is not specified. Note that we still requires the requesting user to have the ALL privilege on SERVER if 'kudu.master_addresses' in that setting up this property should still require administrative privileges. Testing: - Added a new FE test to verify that creating an external Kudu table does not require the ALL privilege on SERVER if 'kudu.master_addresses' is not specified. - Verified that the patch passes the core tests in the DEBUG build. Change-Id: Idbe6e014aead7b94c4927ac3c57db37a0ab46a99 --- M fe/src/main/java/org/apache/impala/analysis/CreateTableStmt.java M fe/src/test/java/org/apache/impala/authorization/AuthorizationStmtTest.java 2 files changed, 13 insertions(+), 5 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/39/17639/1 -- To view, visit http://gerrit.cloudera.org:8080/17639 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: Idbe6e014aead7b94c4927ac3c57db37a0ab46a99 Gerrit-Change-Number: 17639 Gerrit-PatchSet: 1 Gerrit-Owner: Fang-Yu Rao <[email protected]>
