Hao Hao has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/15436 )
Change subject: [ranger] fix incorrect authz enforcement in Ranger authz provider ...................................................................... [ranger] fix incorrect authz enforcement in Ranger authz provider Previous commit 0d29977 introduced Ranger authorization provider, however incorrect authz enforcement is used against table creation and table rename (CREATE on TABLE). This patch fixes it via checking (CREATE on DATABASE) privilege. Change-Id: I267aabc5f224ee7ceeffd6187785595dd6f16487 Reviewed-on: http://gerrit.cloudera.org:8080/15436 Tested-by: Kudu Jenkins Reviewed-by: Andrew Wong <[email protected]> --- M src/kudu/master/ranger_authz_provider.cc M src/kudu/master/ranger_authz_provider.h M src/kudu/ranger/ranger_client.cc M src/kudu/ranger/ranger_client.h 4 files changed, 48 insertions(+), 10 deletions(-) Approvals: Kudu Jenkins: Verified Andrew Wong: Looks good to me, approved -- To view, visit http://gerrit.cloudera.org:8080/15436 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: merged Gerrit-Change-Id: I267aabc5f224ee7ceeffd6187785595dd6f16487 Gerrit-Change-Number: 15436 Gerrit-PatchSet: 9 Gerrit-Owner: Hao Hao <[email protected]> Gerrit-Reviewer: Adar Dembo <[email protected]> Gerrit-Reviewer: Andrew Wong <[email protected]> Gerrit-Reviewer: Attila Bukor <[email protected]> Gerrit-Reviewer: Hao Hao <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Reviewer: Tidy Bot (241)
