-
Type:
Sub-task
-
Status: Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 2.1.0.0-incubating
-
Component/s: Security
-
Labels:None
We plan to do privilege check in hawq side for build-in catalogs, tables and functions. The reasons are two folds;
1 Ranger mainly manage the user data, but build-in catalogs and tables are not related to user data(note that some of them contain statistics information of user data such as catalog table pg_aoseg_*).
2 We haven't finish the code of merge of all the privilege check requests into one big request. Without it query such as "\d" and "analyze" will lead to hundreds of RPS request.
- is duplicated by
-
HAWQ-1206 Process catalog table ACL on Ranger.
-
- Resolved
-
- links to