You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@impala.apache.org by jo...@apache.org on 2019/05/03 21:26:11 UTC

[impala] 01/04: IMPALA-8477: [DOCS] SHOW GRANT GROUP for Ranger authorization

This is an automated email from the ASF dual-hosted git repository.

joemcdonnell pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/impala.git

commit f5e89d6239eb7dbfa0acedd1704bcd398a197f9f
Author: Alex Rodoni <ar...@cloudera.com>
AuthorDate: Thu May 2 16:05:38 2019 -0700

    IMPALA-8477: [DOCS] SHOW GRANT GROUP for Ranger authorization
    
    Change-Id: Iadf0d5c8b43809880f194e0bc810df06bfab2075
    Reviewed-on: http://gerrit.cloudera.org:8080/13220
    Tested-by: Impala Public Jenkins <im...@cloudera.com>
    Reviewed-by: Austin Nobis <an...@cloudera.com>
    Reviewed-by: Fredy Wijaya <fw...@cloudera.com>
---
 docs/topics/impala_show.xml | 76 +++++++++++++++++++++++----------------------
 1 file changed, 39 insertions(+), 37 deletions(-)

diff --git a/docs/topics/impala_show.xml b/docs/topics/impala_show.xml
index c7e6e0e..86c280a 100644
--- a/docs/topics/impala_show.xml
+++ b/docs/topics/impala_show.xml
@@ -33,16 +33,10 @@ under the License.
   </prolog>
 
   <conbody>
-
-    <p>
-      <indexterm audience="hidden">SHOW statement</indexterm>
-      The <codeph>SHOW</codeph> statement is a flexible way to get information about different types of Impala
-      objects.
-    </p>
-
+    <p> The <codeph>SHOW</codeph> statement is a flexible way to get information
+      about different types of Impala objects. </p>
     <p conref="../shared/impala_common.xml#common/syntax_blurb"/>
-
-<codeblock>SHOW DATABASES [[LIKE] '<varname>pattern</varname>']
+    <codeblock>SHOW DATABASES [[LIKE] '<varname>pattern</varname>']
 SHOW SCHEMAS [[LIKE] '<varname>pattern</varname>'] - an alias for SHOW DATABASES
 SHOW TABLES [IN <varname>database_name</varname>] [[LIKE] '<varname>pattern</varname>']
 <ph rev="1.2.0">SHOW [AGGREGATE | ANALYTIC] FUNCTIONS [IN <varname>database_name</varname>] [[LIKE] '<varname>pattern</varname>']</ph>
@@ -56,39 +50,47 @@ SHOW FILES IN [<varname>database_name</varname>.]<varname>table_name</varname> <
 
 <ph rev="2.0.0">SHOW ROLES
 SHOW CURRENT ROLES
-SHOW ROLE GRANT GROUP <varname>group_name</varname>
-SHOW GRANT ROLE <varname>role_name</varname></ph>
+SHOW ROLE GRANT GROUP <varname>group_name</varname></ph>
 
-<ph rev="3.1.0">SHOW GRANT USER <varname>user_name</varname>
-SHOW GRANT USER <varname>user_name</varname> ON SERVER
+<ph rev="3.1.0">SHOW GRANT USER <varname>user_name</varname> ON SERVER
 SHOW GRANT USER <varname>user_name</varname> ON DATABASE <varname>database_name</varname>
-SHOW GRANT USER <varname>user_name</varname> ON TABLE <varname>table_name</varname>
+SHOW GRANT USER <varname>user_name</varname> ON TABLE <varname>database_name.table_name</varname>
 SHOW GRANT USER <varname>user_name</varname> ON URI <varname>uri</varname></ph>
-</codeblock>
-
-    <p>
-      Issue a <codeph>SHOW <varname>object_type</varname></codeph> statement to see the appropriate objects in the
-      current database, or <codeph>SHOW <varname>object_type</varname> IN <varname>database_name</varname></codeph>
-      to see objects in a specific database.
-    </p>
-
-    <p>
-      The optional <varname>pattern</varname> argument is a quoted string literal, using Unix-style
-      <codeph>*</codeph> wildcards and allowing <codeph>|</codeph> for alternation. The preceding
-      <codeph>LIKE</codeph> keyword is also optional. All object names are stored in lowercase, so use all
-      lowercase letters in the pattern string. For example:
-    </p>
-
-<codeblock>show databases 'a*';
-show databases like 'a*';
-show tables in some_db like '*fact*';
-use some_db;
-show tables '*dim*|*fact*';</codeblock>
-
+SHOW GRANT USER <varname>user_name</varname> ON COLUMN <varname>database_name.table_name.column_name</varname></codeblock>
+    <p>The following statements are supported only when Impala uses Sentry to
+      manage authorization.</p>
+    <codeblock>SHOW GRANT USER <varname>user_name</varname>
+
+SHOW GRANT ROLE <varname>role_name</varname>
+SHOW GRANT ROLE <varname>role_name</varname> ON SERVER
+SHOW GRANT ROLE <varname>role_name</varname> ON DATABASE <varname>database_name</varname>
+SHOW GRANT ROLE <varname>role_name</varname> ON TABLE <varname>database_name.table_name</varname>
+SHOW GRANT ROLE <varname>role_name</varname> ON URI <varname>uri</varname>
+SHOW GRANT ROLE <varname>role_name</varname> ON COLUMN <varname>database_name.table_name.column_name</varname></codeblock>
+    <p rev="3.3">The following statements are supported only when Impala uses
+      Ranger to manage authorization.</p>
+    <codeblock>SHOW GRANT GROUP <varname>group_name</varname> ON SERVER
+SHOW GRANT GROUP <varname>group_name</varname> ON DATABASE <varname>database_name</varname>
+SHOW GRANT GROUP <varname>group_name</varname> ON TABLE <varname>database_name.table_name</varname>
+SHOW GRANT GROUP <varname>group_name</varname> ON URI <varname>uri</varname>
+SHOW GRANT GROUP <varname>group_name</varname> ON COLUMN <varname>database_name.table_name.column_name</varname></codeblock>
+    <p> Issue a <codeph>SHOW <varname>object_type</varname></codeph> statement
+      to see the appropriate objects in the current database, or <codeph>SHOW
+          <varname>object_type</varname> IN
+        <varname>database_name</varname></codeph> to see objects in a specific
+      database. </p>
+    <p> The optional <varname>pattern</varname> argument is a quoted string
+      literal, using Unix-style <codeph>*</codeph> wildcards and allowing
+        <codeph>|</codeph> for alternation. The preceding <codeph>LIKE</codeph>
+      keyword is also optional. All object names are stored in lowercase, so use
+      all lowercase letters in the pattern string. For example: </p>
+    <codeblock>SHOW DATABASES 'a*';
+SHOW DATABASES LIKE 'a*';
+SHOW TABLES IN some_db LIKE '*fact*';
+USE some_db;
+SHOW TABLES '*dim*|*fact*';</codeblock>
     <p conref="../shared/impala_common.xml#common/cancel_blurb_no"/>
-
     <p outputclass="toc inpage"/>
-
   </conbody>
 
   <concept rev="2.2.0" id="show_files">