You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@sentry.apache.org by "Na Li (JIRA)" <ji...@apache.org> on 2018/07/30 20:05:00 UTC

[jira] [Created] (SENTRY-2331) Support grant option for DDL operation

Na Li created SENTRY-2331:
-----------------------------

             Summary: Support grant option for DDL operation
                 Key: SENTRY-2331
                 URL: https://issues.apache.org/jira/browse/SENTRY-2331
             Project: Sentry
          Issue Type: Sub-task
          Components: Sentry
    Affects Versions: 2.1.0
            Reporter: Na Li
            Assignee: Na Li


Authorization for some DDL operation needs to check if the user has grant option. The authorization process should be extended to support this.

For example, "ALTER TABLE SET OWNER" command is special in the sense that it is both DDL option that updates metadata, and it implicitly transfers privileges (permission update). Therefore, authorizing this command requires both privilege for changing metadata and grant option.




--
This message was sent by Atlassian JIRA
(v7.6.3#76005)