[HAWQ-1375] Ranger should always using the current user to do privilege check.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Invalid
• Fix Version/s: 2.2.0.0-incubating
• Assignee: Ed Espino
• Reporter: Hubert Zhang
• Created: 03/Mar/17 08:09
• Updated: 03/Mar/17 09:18
• Resolved: 03/Mar/17 09:18

Description

Failure Case:

user u1 create table a(i int);
user u2 create view av as select * from a;
user u3 select * from av.

When ORCA is on, u3 will first ask select privilege as user u3 to Ranger, and then ask select privilege as user u2 to Ranger.
The second check should be removed, since there may be no privilege for u2 to select av even if av is created by u2 in Ranger mode.