You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hawq.apache.org by li...@apache.org on 2017/03/29 20:53:51 UTC
incubator-hawq-docs git commit: move create cast w/o function to
hawq-native list
Repository: incubator-hawq-docs
Updated Branches:
refs/heads/feature/ranger-integration 847a79955 -> 6ef62dabf
move create cast w/o function to hawq-native list
Project: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/commit/6ef62dab
Tree: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/tree/6ef62dab
Diff: http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/diff/6ef62dab
Branch: refs/heads/feature/ranger-integration
Commit: 6ef62dabf59900aee5a12f2d683840e006c1d183
Parents: 847a799
Author: Lisa Owen <lo...@pivotal.io>
Authored: Wed Mar 29 13:53:20 2017 -0700
Committer: Lisa Owen <lo...@pivotal.io>
Committed: Wed Mar 29 13:53:30 2017 -0700
----------------------------------------------------------------------
markdown/ranger/ranger-policy-creation.html.md.erb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-hawq-docs/blob/6ef62dab/markdown/ranger/ranger-policy-creation.html.md.erb
----------------------------------------------------------------------
diff --git a/markdown/ranger/ranger-policy-creation.html.md.erb b/markdown/ranger/ranger-policy-creation.html.md.erb
index f3b73f6..9523c77 100644
--- a/markdown/ranger/ranger-policy-creation.html.md.erb
+++ b/markdown/ranger/ranger-policy-creation.html.md.erb
@@ -54,6 +54,7 @@ HAWQ *always* employs its native authorization for operations on its catalog. HA
- operations on HAWQ catalog
- HAWQ catalog-related built-in functions
+- `CREATE CAST` command when function is NULL
- `CREATE DATABASE`, `DROP DATABASE`, `createdb`, `dropdb`
- `hawq filespace`
- `CREATE`, `DROP`, or `ALTER` commands for resource queues
@@ -71,7 +72,6 @@ When Ranger is enabled, HAWQ-Ranger authorization is employed for access to user
In cases where an operation requires super-user privileges, HAWQ first performs a super-user check, then requests the Ranger access check. Those operations requiring super-user checks include:
-- `CREATE CAST` command when function is NULL
- `CREATE`, `DROP`, or `ALTER` commands that involve a foreign-data wrapper
- `CREATE LANGUAGE`, `DROP LANGUAGE` for non-built-in languages
- `CREATE FUNCTION` command for untrusted languages.