Andrew Wong has posted comments on this change. ( 
http://gerrit.cloudera.org:8080/15436 )

Change subject: [ranger] fix incorrect authz enforcement in Ranger authz 
provider
......................................................................


Patch Set 3:

(1 comment)

http://gerrit.cloudera.org:8080/#/c/15436/1/src/kudu/ranger/ranger_client.h
File src/kudu/ranger/ranger_client.h:

http://gerrit.cloudera.org:8080/#/c/15436/1/src/kudu/ranger/ranger_client.h@57
PS1, Line 57:   enum Scope {
> Isn't that a huge departure from users who are used to Sentry? Does that me
Looking around at some posts about Ranger, seems like the answer to my first 
question is to use wildcards.

Not sure about my second question though. If I have SELECT ON TABLE, does that 
imply that I have SELECT ON COLUMN for all of its columns? And if so, does the 
same apply if I have METADATA ON DATABASE? Would that mean that I have METADATA 
ON TABLE for all of its tables?



--
To view, visit http://gerrit.cloudera.org:8080/15436
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I267aabc5f224ee7ceeffd6187785595dd6f16487
Gerrit-Change-Number: 15436
Gerrit-PatchSet: 3
Gerrit-Owner: Hao Hao <hao....@cloudera.com>
Gerrit-Reviewer: Adar Dembo <a...@cloudera.com>
Gerrit-Reviewer: Andrew Wong <aw...@cloudera.com>
Gerrit-Reviewer: Attila Bukor <abu...@apache.org>
Gerrit-Reviewer: Hao Hao <hao....@cloudera.com>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Comment-Date: Sun, 15 Mar 2020 02:20:08 +0000
Gerrit-HasComments: Yes

Reply via email to