Uploaded image for project: 'IMPALA'
  1. IMPALA
  2. IMPALA-7695

Consolidate ACL inheritance

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Open
    • Minor
    • Resolution: Unresolved
    • None
    • None
    • Security
    • None
    • ghx-label-8

    Description

      As of now Impala behavior is not consistent regarding ACL inheritance by default.

      If --insert_inherit_permissions is not specified, then:

      CREATE EXTERNAL TABLE acl_test (a int) partitioned by (b int) STORED AS PARQUET LOCATION '/dataroot/acl_test/';
      

      This will create the table directory (/dataroot/acl_test), and inherit the parent dir (/dataroot) acls.

      ALTER TABLE acl_test ADD PARTITION (b=10) 
      

      This will create the partition directory (/dataroot/acl_test/b=10) and inherit the parent dir (/dataroot/acl_test) acls.

      INSERT INTO acl_test (a,b) VALUES (1,2) 
      

      This will create the partition directory (/dataroot/acl_test/b=2) but will not inherit any acls.

      The difference in the INSERT/ALTER behavior will lead to inconsistent partition directory permissions, depending on whether they were created explicitly beforhand or implicitly during an insert.

      This is documented, but generally unexpected. I'd recommend to review if a more consistent approach could be followed for ACLs on partition directories..

      Attachments

        Activity

          People

            Unassigned Unassigned
            zherczeg Zsolt Herczeg
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: