[IMPALA-10211] Add support for role-related statements

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Component/s: Frontend, Security
• Labels: backwards-compatibility
• Target Version: Impala 4.0.0
• Epic Color: ghx-label-4
• Assignee: Fang-Yu Rao
• Reporter: Fang-Yu Rao
• Created: 03/Oct/20 18:23
• Updated: 11/Dec/23 07:13
• Resolved: 13/May/21 22:45

Description

After IMPALA-9708, we dropped the support for Sentry, an authorization service providing role-based authorization. Since then Impala lacks support for role-based authorization.

On the other hand, after RANGER-2425, Ranger added APIs for role-related SQL statements. It would be nice to enable role-related SQL statements in Impala with Ranger being the authorization provider so that users that were using Sentry as the authorization provider could still be using Impala if role-based authorization is required.

Issue Links

• links to: WIP patch