[jira] [Reopened] (IMPALA-12554) Create only one Ranger policy for GRANT statement

["Fang-Yu Rao (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/IMPALA-12554?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Fang-Yu Rao reopened IMPALA-12554:
----------------------------------

> Create only one Ranger policy for GRANT statement
> -------------------------------------------------
>
>                 Key: IMPALA-12554
>                 URL: https://issues.apache.org/jira/browse/IMPALA-12554
>             Project: IMPALA
>          Issue Type: Improvement
>            Reporter: Fang-Yu Rao
>            Assignee: Fang-Yu Rao
>            Priority: Major
>
> Currently Impala would create a Ranger policy for each column specified in a GRANT statement. For instance, after the following query, 3 Ranger policies would be created on the Ranger server. This could result in a lot of policies created when there are many columns specified and it may result in Impala's Ranger plug-in taking a long time to download the policies from the Ranger server. It would be great if Impala only creates one single policy for columns in the same table.
> {code:java}
> [localhost:21050] default> grant select(id, bool_col, tinyint_col) on table functional.alltypes to user non_owner;
> Query: grant select(id, bool_col, tinyint_col) on table functional.alltypes to user non_owner
> Query submitted at: 2023-11-10 09:38:58 (Coordinator: http://fangyu:25000)
> Query progress can be monitored at: http://fangyu:25000/query_plan?query_id=bc4fa1cdefe5881b:413d9a6900000000
> +---------------------------------+
> | summary                         |
> +---------------------------------+
> | Privilege(s) have been granted. |
> +---------------------------------+
> Fetched 1 row(s) in 0.67s
> {code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org