You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@impala.apache.org by "Joe McDonnell (Jira)" <ji...@apache.org> on 2020/12/23 19:37:00 UTC

[jira] [Resolved] (IMPALA-9771) Remove authorization roles functionality

     [ https://issues.apache.org/jira/browse/IMPALA-9771?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Joe McDonnell resolved IMPALA-9771.
-----------------------------------
    Fix Version/s: Not Applicable
       Resolution: Won't Fix

This code will be used for Ranger role functionality, so this won't be removed.

> Remove authorization roles functionality
> ----------------------------------------
>
>                 Key: IMPALA-9771
>                 URL: https://issues.apache.org/jira/browse/IMPALA-9771
>             Project: IMPALA
>          Issue Type: Improvement
>          Components: Frontend
>    Affects Versions: Impala 4.0
>            Reporter: Joe McDonnell
>            Priority: Major
>             Fix For: Not Applicable
>
>
> There are several DDL statements that are specific to Sentry and only throw an error for Ranger. Specifically, the following:
> {noformat}
> show roles;
> show current roles;
> create role foo;
> drop role foo;
> grant select ... to role foo;
> revoke select .. from role foo;
> show grant role foo;
> show role grant group foo;{noformat}
> This is tested in authorization/test_ranger.py::TestRanger::test_unsupported_sql()
> [https://github.com/apache/impala/blob/master/tests/authorization/test_ranger.py#L727-L744]
> These can be removed now that Sentry support has been removed.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)