[IMPALA-10436] Investigate the need for granting ALL privilege on server when creating an external Kudu table

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Impala 4.2.0
• Component/s: Frontend
• Epic Color: ghx-label-1
• Assignee: Fang-Yu Rao
• Reporter: Fang-Yu Rao
• Created: 12/Jan/21 05:37
• Updated: 16/Jun/24 22:10
• Resolved: 08/Nov/22 17:07

Description

We found that to allow a user usr to create an external Kudu table in Impala, we need to grant the user the ALL privilege on the server in advance like the following, which seems too strict. It would be good to figure out whether such a requirement is indeed necessary.

GRANT ALL ON SERVER TO USER usr;

Issue Links

• is related to: IMPALA-4000 Restricted Sentry authorization for Kudu Tables
• is related to: IMPALA-10300 Investigate the need for checking the privilege on server when creating a Kudu table with property of kudu.master_addresses