[HAWQ-1275] Check build-in catalogs, tables and functions in native aclcheck.

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.1.0.0-incubating
• Component/s: Security
• Assignee: Hubert Zhang
• Reporter: Hubert Zhang
• Created: 16/Jan/17 02:38
• Updated: 18/Feb/17 05:27
• Resolved: 20/Jan/17 09:31

Description

We plan to do privilege check in hawq side for build-in catalogs, tables and functions. The reasons are two folds;
1 Ranger mainly manage the user data, but build-in catalogs and tables are not related to user data(note that some of them contain statistics information of user data such as catalog table pg_aoseg_*).
2 We haven't finish the code of merge of all the privilege check requests into one big request. Without it query such as "\d" and "analyze" will lead to hundreds of RPS request.

Issue Links

• is duplicated by: HAWQ-1206 Process catalog table ACL on Ranger.
• links to: GitHub Pull Request #1087