Hello Impala Public Jenkins,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/17639
to look at the new patch set (#2).
Change subject: IMPALA-10436: Require lower privilege for external Kudu table
creation
......................................................................
IMPALA-10436: Require lower privilege for external Kudu table creation
After IMPALA-4000, creating an external Kudu table requires the
requesting user to possess the ALL privilege on SERVER due to the fact
that Kudu did not support authorization at that time. Such a requirement
suffers from the drawback of having to grant more privileges than needed
to the requesting user if we want to allow users other than Impala
administrators to create external Kudu tables as well.
Now that Kudu supports authorization, this patch relaxes such a
restriction so that a requesting user is allowed to create an external
Kudu table as long as the user is granted the CREATE privilege on the
database where the external table will be created if
'kudu.master_addresses' is not specified. Note that we still require
the requesting user to have the ALL privilege on SERVER if
'kudu.master_addresses' is specified in that setting up this property
should still require administrative privileges.
Testing:
- Added a new FE test to verify that creating an external Kudu table
does not require the ALL privilege on SERVER if
'kudu.master_addresses' is not specified.
- Verified that the patch passes the core tests in the DEBUG build.
Change-Id: Idbe6e014aead7b94c4927ac3c57db37a0ab46a99
---
M fe/src/main/java/org/apache/impala/analysis/CreateTableStmt.java
M fe/src/test/java/org/apache/impala/authorization/AuthorizationStmtTest.java
2 files changed, 13 insertions(+), 5 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/39/17639/2
--
To view, visit http://gerrit.cloudera.org:8080/17639
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: Idbe6e014aead7b94c4927ac3c57db37a0ab46a99
Gerrit-Change-Number: 17639
Gerrit-PatchSet: 2
Gerrit-Owner: Fang-Yu Rao <[email protected]>
Gerrit-Reviewer: Impala Public Jenkins <[email protected]>
