[HAWQ-1279] Force to recompute namespace_path when enable_ranger

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: backlog
• Component/s: PXF, Security
• Assignee: Hongxu Ma
• Reporter: Hongxu Ma
• Created: 17/Jan/17 08:56
• Updated: 09/Feb/17 08:18
• Resolved: 19/Jan/17 06:12

Description

namespace_path is cached in each psql session and the cache invalidation is triggered by Grant/Revoke SQL.

When enable_ranger, Grant/Revoke SQL is no longer use, so the cache prevent a ack-check request sending.

Example:

// create table t(i int); => failed
[{""resource"":{""database"":""postgres"",""schema"":""pg_catalog""},""privileges"":[""usage""],""allowed"":true}]
[{""resource"":{""database"":""postgres"",""schema"":""pg_catalog""},""privileges"":[""usage""],""allowed"":true}]
[{""resource"":{""database"":""postgres"",""schema"":""public""},""privileges"":[""usage""],""allowed"":false}]

// grant usage and create permissions to public schema in ranger and try again => failed again
[{""resource"":{""database"":""postgres"",""schema"":""pg_catalog""},""privileges"":[""usage""],""allowed"":true}]
[{""resource"":{""database"":""postgres"",""schema"":""pg_catalog""},""privileges"":[""usage""],""allowed"":true}]
// why not send a request for USAGE??

Issue Links

• duplicates: HAWQ-1238 Can not get any data when the network is connected again after a while disconnected.
• links to: GitHub Pull Request #1094