lipeng...@sensorsdata.cn has uploaded a new patch set (#3). ( http://gerrit.cloudera.org:8080/18373 )
Change subject: IMPALA-10272: LOAD DATA should respect Ranger-HDFS policies ...................................................................... IMPALA-10272: LOAD DATA should respect Ranger-HDFS policies When Ranger authorization is enabled, analyzing a LOAD DATA statement may fails when checking access to the source file if the HDFS permissions is more restrict than the Ranger policies. This patch provides a quick fix, when Ranger authz is enabled, we invoke method hadoop.fs.FileSystem.access(Path path, FsAction mode) to check the actual access permission first. Testing: - existing tests - add FsPermissionCheckerTest.java to fe ut Change-Id: Ia0acd83e8e237ea6a1d5fe1e9e440db0dd68b09c --- M fe/src/main/java/org/apache/impala/analysis/LoadDataStmt.java M fe/src/main/java/org/apache/impala/util/FsPermissionChecker.java A fe/src/test/java/org/apache/impala/util/FsPermissionCheckerTest.java 3 files changed, 121 insertions(+), 6 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/73/18373/3 -- To view, visit http://gerrit.cloudera.org:8080/18373 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newpatchset Gerrit-Change-Id: Ia0acd83e8e237ea6a1d5fe1e9e440db0dd68b09c Gerrit-Change-Number: 18373 Gerrit-PatchSet: 3 Gerrit-Owner: Anonymous Coward <lipeng...@sensorsdata.cn> Gerrit-Reviewer: Anonymous Coward <lipeng...@sensorsdata.cn> Gerrit-Reviewer: Impala Public Jenkins <impala-public-jenk...@cloudera.com> Gerrit-Reviewer: Qifan Chen <qc...@cloudera.com> Gerrit-Reviewer: Quanlong Huang <huangquanl...@gmail.com>
