Uploaded image for project: 'IMPALA'
  1. IMPALA
  2. IMPALA-7916 Support for Apache Ranger authorization provider
  3. IMPALA-8651

Update grammar for Ranger revoke grant option statement

    XMLWordPrintableJSON

    Details

    • Type: Sub-task
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Frontend
    • Labels:
      None
    • Epic Color:
      ghx-label-4

      Description

      REVOKE GRANT OPTION FOR SELECT ON DATABASE DB FROM USER USR;

      In Ranger, it is not possible to REVOKE GRANT OPTION for a specific privilege (SELECT). The GRANT OPTION must be revoked for the entire DATABASE DB resource.  The Impala grammar should be updated to support omitting the FOR SELECT if the authorization provider is set to Ranger. If that grammar is used for Sentry, it should throw an exception.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              anobis Austin Nobis
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: