[jira] [Commented] (IMPALA-10211) Add support for role-related statements

["Fang-Yu Rao (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/IMPALA-10211?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17344174#comment-17344174 ] 

Fang-Yu Rao commented on IMPALA-10211:
--------------------------------------

Hi [~stigahuang], sorry for the late response. I think we could close this JIRA.

There are still some follow-up works to this JIRA, but those would require the support from Ranger's API's, which is not yet in place.
 # https://issues.apache.org/jira/browse/RANGER-3145 (Dropping a role that is still associated with privileges).
 # https://issues.apache.org/jira/browse/RANGER-3150 (Displaying all the privileges granted to a specified role).

> Add support for role-related statements
> ---------------------------------------
>
>                 Key: IMPALA-10211
>                 URL: https://issues.apache.org/jira/browse/IMPALA-10211
>             Project: IMPALA
>          Issue Type: New Feature
>          Components: Frontend, Security
>            Reporter: Fang-Yu Rao
>            Assignee: Fang-Yu Rao
>            Priority: Major
>              Labels: backwards-compatibility
>
> After IMPALA-9708, we dropped the support for Sentry, an authorization service providing role-based authorization. Since then Impala lacks support for role-based authorization.
> On the other hand, after RANGER-2425, Ranger added APIs for role-related SQL statements. It would be nice to enable role-related SQL statements in Impala with Ranger being the authorization provider so that users that were using Sentry as the authorization provider could still be using Impala if role-based authorization is required.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org