[IMPALA-7344] Restrict ALTER DATABASE/TABLE SET OWNER to ALL/OWNER privilege with GRANT OPTION enabled

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Impala 3.0
• Fix Version/s: Impala 3.1.0
• Component/s: Frontend
• Labels: security
• Epic Color: ghx-label-4
• Assignee: Fredy Wijaya
• Reporter: Adam Holley
• Created: 24/Jul/18 00:26
• Updated: 22/Aug/18 23:20
• Resolved: 22/Aug/18 22:37

Description

When authorization is enabled, we should restrict ALTER DATABASE/TABLE SET OWNER to those users with ALL/OWNER privilege and with GRANT OPTION enabled.