Attila Bukor has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/16071 )
Change subject: KUDU-3090 Add delegate admin privilege ...................................................................... KUDU-3090 Add delegate admin privilege Database systems usually require ALL WITH GRANT OPTION privilege to change ownership of a table. Apache Ranger supports a special quasi-access type called "delegate admin" which grants the user permissions to grant and revoke permissions which is similar to GRANT OPTION in other systems. This patch adds support for this delegate option flag which is required in addition to "ALL" to create a table with a different owner. It also refactors the Ranger subprocess to allow evaluating ALL and delegate admin in a single RangerRequestPB. Change-Id: If8ba018dac568a1ab74cf2d5657221579636ac1c Reviewed-on: http://gerrit.cloudera.org:8080/16071 Tested-by: Kudu Jenkins Reviewed-by: Grant Henke <[email protected]> --- M java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/ranger/RangerProtocolHandler.java M java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/ranger/authorization/RangerKuduAuthorizer.java M java/kudu-subprocess/src/test/java/org/apache/kudu/subprocess/ranger/TestRangerSubprocess.java M java/kudu-subprocess/src/test/java/org/apache/kudu/subprocess/ranger/authorization/TestRangerKuduAuthorizer.java M src/kudu/integration-tests/master_authz-itest.cc M src/kudu/integration-tests/ts_authz-itest.cc M src/kudu/master/ranger_authz_provider.cc M src/kudu/ranger/mini_ranger-test.cc M src/kudu/ranger/mini_ranger.cc M src/kudu/ranger/mini_ranger.h M src/kudu/ranger/ranger.proto M src/kudu/ranger/ranger_client-test.cc M src/kudu/ranger/ranger_client.cc M src/kudu/ranger/ranger_client.h 14 files changed, 254 insertions(+), 133 deletions(-) Approvals: Kudu Jenkins: Verified Grant Henke: Looks good to me, approved -- To view, visit http://gerrit.cloudera.org:8080/16071 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: merged Gerrit-Change-Id: If8ba018dac568a1ab74cf2d5657221579636ac1c Gerrit-Change-Number: 16071 Gerrit-PatchSet: 15 Gerrit-Owner: Attila Bukor <[email protected]> Gerrit-Reviewer: Andrew Wong <[email protected]> Gerrit-Reviewer: Attila Bukor <[email protected]> Gerrit-Reviewer: Grant Henke <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Reviewer: Tidy Bot (241)
