You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "Alexander Kolbasov (JIRA)" <ji...@apache.org> on 2018/09/10 20:24:00 UTC
[jira] [Commented] (IMPALA-7074) Update OWNER privilege on CREATE,
DROP, and ALTER SET OWNER
[ https://issues.apache.org/jira/browse/IMPALA-7074?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16609757#comment-16609757 ]
Alexander Kolbasov commented on IMPALA-7074:
--------------------------------------------
Are you trying to mirror inside Impala catalog privilege changes done by Sentry? This looks dangerous since you may easily end up with weird conflicts when you'll later want to merge Sentry state with Catalog state. Does Sentry state overrides Catalog state completely or there is some merge process? Can you just wait for Sentry to push changes down to catalog?
> Update OWNER privilege on CREATE, DROP, and ALTER SET OWNER
> -----------------------------------------------------------
>
> Key: IMPALA-7074
> URL: https://issues.apache.org/jira/browse/IMPALA-7074
> Project: IMPALA
> Issue Type: Sub-task
> Components: Frontend
> Reporter: Fredy Wijaya
> Assignee: Adam Holley
> Priority: Major
> Labels: security
> Fix For: Impala 3.1.0
>
>
> When objects are created and owner privilege is enabled in sentry, we should create an owner privilege in the catalog without waiting for the next sentry poll to get the owner privilege. This should also be done for DROP DB/Table, and ALTER DB/Table set owner.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org