Details

    • Type: Sub-task
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.1.0.0-incubating
    • Component/s: Security
    • Labels:
      None

      Description

      HAWQ does ACL checks on segments, which we think is not necessary for QE because there is no catalog data on segments. Even a hacker can connect to a segdb with GP_ROLE_EXECUTE, he can not do any queries while he can do on Greenplum for there is catalog data on segments. Further more, in ranger checks, if all segments do same checks as master with RPS, it costs a lot and effects the performance.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                wcl14 Chunling Wang
                Reporter:
                wcl14 Chunling Wang
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: