You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@impala.apache.org by "Fang-Yu Rao (Jira)" <ji...@apache.org> on 2022/12/01 02:18:00 UTC

[jira] [Created] (IMPALA-11769) Difference in required privileges to execute a UDF in a SELECT query between Impala and Hive

Fang-Yu Rao created IMPALA-11769:
------------------------------------

             Summary: Difference in required privileges to execute a UDF in a SELECT query between Impala and Hive
                 Key: IMPALA-11769
                 URL: https://issues.apache.org/jira/browse/IMPALA-11769
             Project: IMPALA
          Issue Type: Task
            Reporter: Fang-Yu Rao
            Assignee: Fang-Yu Rao


After IMPALA-10986, to execute a UDF of a database in a SELECT query, a user is required to additionally have the SELECT privilege on the UDF beside any of INSERT, REFRESH, SELECT on the database. The requirement is a bit different from that in Hive when Ranger is the authorization provider in that Hive's Ranger plugin *only* requires the user to have the SELECT privilege on the UDF.

We should decide whether we would like to change Impala's behavior with respect to UDF execution in a SELECT query so that Impala and Hive would have the same required privilege.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)