Hao Hao has posted comments on this change. ( http://gerrit.cloudera.org:8080/11797 )
Change subject: [sentry] Integrate AuthzProvider into CatalogManager ...................................................................... Patch Set 7: (1 comment) http://gerrit.cloudera.org:8080/#/c/11797/5/src/kudu/master/catalog_manager.h File src/kudu/master/catalog_manager.h: http://gerrit.cloudera.org:8080/#/c/11797/5/src/kudu/master/catalog_manager.h@865 PS5, Line 865: One exception is when the user is authorized to operate on table, : // then TABLE_NOT_FOUND error status is returned. > How is this possible if first the lock is taken on the table prior to check Sorry, I didn't make it clear in the comment. Yeah, in such scenario the lock is not taken, but we are still be able to validate if the user is authorized to operate a table _with such name_. Because the Sentry store the table name as part of information to identify a privilege. -- To view, visit http://gerrit.cloudera.org:8080/11797 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: comment Gerrit-Change-Id: Iab4aa027ae6eb4520db48ce348db552c9feec2a8 Gerrit-Change-Number: 11797 Gerrit-PatchSet: 7 Gerrit-Owner: Hao Hao <[email protected]> Gerrit-Reviewer: Adar Dembo <[email protected]> Gerrit-Reviewer: Alexey Serbin <[email protected]> Gerrit-Reviewer: Andrew Wong <[email protected]> Gerrit-Reviewer: Dan Burkert <[email protected]> Gerrit-Reviewer: Hao Hao <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Reviewer: Tidy Bot (241) Gerrit-Comment-Date: Thu, 07 Feb 2019 22:52:19 +0000 Gerrit-HasComments: Yes
