Fang-Yu Rao has uploaded a new patch set (#3). ( http://gerrit.cloudera.org:8080/17640 )
Change subject: IMPALA-10436: Require lower privilege for external Kudu table creation ...................................................................... IMPALA-10436: Require lower privilege for external Kudu table creation After IMPALA-4000, creating an external Kudu table requires the requesting user to possess the ALL privilege on SERVER due to the fact that Kudu did not support authorization at that time. Such a requirement suffers from the drawback of having to grant more privileges than needed to the requesting user if we want to allow users other than Impala administrators to create external Kudu tables as well. Now that Kudu supports authorization, this patch relaxes such a restriction so that a requesting user is allowed to create an external Kudu table as long as authorization is enabled in Kudu and the user is granted the CREATE privilege on the database where the external table will be created if 'kudu.master_addresses' is not specified. Note that we still require the requesting user to have the ALL privilege on SERVER if 'kudu.master_addresses' is specified in that setting up this property should still be considered as an administrative operation. Testing: - Added a new FE test to verify that creating an external Kudu table does not require the ALL privilege on SERVER if 'kudu.master_addresses' is not specified. - Verified that the patch passes the core tests in the DEBUG build. Change-Id: I7936e1d8c48696169f7ad7ad92abe44a26eea3c4 --- M be/src/common/global-flags.cc M be/src/util/backend-gflag-util.cc M common/thrift/BackendGflags.thrift M fe/src/main/java/org/apache/impala/analysis/CreateTableStmt.java M fe/src/main/java/org/apache/impala/service/BackendConfig.java M fe/src/test/java/org/apache/impala/authorization/AuthorizationStmtTest.java 6 files changed, 28 insertions(+), 6 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/40/17640/3 -- To view, visit http://gerrit.cloudera.org:8080/17640 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newpatchset Gerrit-Change-Id: I7936e1d8c48696169f7ad7ad92abe44a26eea3c4 Gerrit-Change-Number: 17640 Gerrit-PatchSet: 3 Gerrit-Owner: Fang-Yu Rao <[email protected]> Gerrit-Reviewer: Aman Sinha <[email protected]> Gerrit-Reviewer: Csaba Ringhofer <[email protected]> Gerrit-Reviewer: Fang-Yu Rao <[email protected]> Gerrit-Reviewer: Impala Public Jenkins <[email protected]> Gerrit-Reviewer: Quanlong Huang <[email protected]>
