Fang-Yu Rao has uploaded this change for review. ( http://gerrit.cloudera.org:8080/17640
Change subject: IMPALA-10436: Require lower privilege for external Kudu table creation ...................................................................... IMPALA-10436: Require lower privilege for external Kudu table creation After IMPALA-4000, creating an external Kudu table requires the requesting user to possess the ALL privilege on SERVER due to the fact that Kudu did not support authorization at that time. Such a requirement suffers from the drawback of having to grant more privileges than needed to the requesting user if we want to allow users other than Impala administrators to create external Kudu tables as well. Now that Kudu supports authorization, this patch relaxes such a restriction so that a requesting user is allowed to create an external Kudu table as long as the user is granted the CREATE privilege on the database where the external table will be created if 'kudu.master_addresses' is not specified. Note that we still require the requesting user to have the ALL privilege on SERVER if 'kudu.master_addresses' is specified in that setting up this property should still require administrative privileges. Testing: - Added a new FE test to verify that creating an external Kudu table does not require the ALL privilege on SERVER if 'kudu.master_addresses' is not specified. - Verified that the patch passes the core tests in the DEBUG build. Change-Id: I7936e1d8c48696169f7ad7ad92abe44a26eea3c4 --- M fe/src/main/java/org/apache/impala/analysis/CreateTableStmt.java M fe/src/test/java/org/apache/impala/authorization/AuthorizationStmtTest.java 2 files changed, 13 insertions(+), 5 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/40/17640/1 -- To view, visit http://gerrit.cloudera.org:8080/17640 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: I7936e1d8c48696169f7ad7ad92abe44a26eea3c4 Gerrit-Change-Number: 17640 Gerrit-PatchSet: 1 Gerrit-Owner: Fang-Yu Rao <[email protected]>
