You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@sentry.apache.org by "Kalyan Kalvagadda (Jira)" <ji...@apache.org> on 2020/01/02 17:08:05 UTC

[jira] [Updated] (SENTRY-2331) Support grant option for DDL operation

     [ https://issues.apache.org/jira/browse/SENTRY-2331?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Kalyan Kalvagadda updated SENTRY-2331:
--------------------------------------
    Fix Version/s: 2.2.0

> Support grant option for DDL operation
> --------------------------------------
>
>                 Key: SENTRY-2331
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2331
>             Project: Sentry
>          Issue Type: Sub-task
>          Components: Sentry
>    Affects Versions: 2.1.0
>            Reporter: Na Li
>            Assignee: Na Li
>            Priority: Major
>             Fix For: 2.2.0
>
>
> Authorization for some DDL operation needs to check if the user has grant option. The authorization process should be extended to support this.
> For example, "ALTER TABLE SET OWNER" command is special in the sense that it is both DDL option that updates metadata, and it implicitly transfers privileges (permission update). Therefore, authorizing this command requires both privilege for changing metadata and grant option.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)