You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/07/11 19:13:00 UTC
[jira] [Commented] (IMPALA-15011) Add test cases to verify the Ranger audit events produced for GRANT/REVOKE privileges
[ https://issues.apache.org/jira/browse/IMPALA-15011?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18095622#comment-18095622 ]
ASF subversion and git services commented on IMPALA-15011:
----------------------------------------------------------
Commit 00ca633a3c8472f6097abc7be0dc13e477325ac8 in impala's branch refs/heads/master from Fang-Yu Rao
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=00ca633a3 ]
IMPALA-14956: Produce Ranger audit events for GRANT/REVOKE ROLE
Due to RANGER-5595, Impala could not produce Ranger audit events for
the GRANT/REVOKE ROLE statements. This patch works around this issue by
mimicking what RangerHiveAuthorizer#grantRole() does at
https://github.com/apache/ranger/blob/3fd46db/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java#L609-L612.
On a related note, adding the test cases for the GRANT/REVOKE privilege
statements is not in the scope of this JIRA. IMPALA-15011 was created to
keep track of this.
Testing:
- Added Java test cases to verify Ranger audit events could be produced
for the GRANT/REVOKE ROLE statements.
Change-Id: I7e0527af0532749817ea538c253262a5e2a65c61
Reviewed-on: http://gerrit.cloudera.org:8080/24315
Reviewed-by: Michael Smith <mi...@cloudera.com>
Tested-by: Impala Public Jenkins <im...@cloudera.com>
Reviewed-by: Jason Fehr <jf...@cloudera.com>
> Add test cases to verify the Ranger audit events produced for GRANT/REVOKE privileges
> -------------------------------------------------------------------------------------
>
> Key: IMPALA-15011
> URL: https://issues.apache.org/jira/browse/IMPALA-15011
> Project: IMPALA
> Issue Type: Task
> Reporter: Fang-Yu Rao
> Priority: Major
>
> IMPALA-8400 implemented Ranger audit event handler. But no Java test cases were added for the GRANT/REVOKE privilege statements. It would be good if we add some test cases to verify the contents of the Ranger audit events for these statements.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org