[SENTRY-2540] Only use SELECT action for filter SHOW DATABASES and SHOW TABLES command based on configuration

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.2.0, 2.3.0
• Assignee: Na Li
• Reporter: Na Li
• Created: 11/Dec/19 20:40
• Updated: 02/Jan/20 17:02
• Resolved: 02/Jan/20 17:02

Description

When there are thousands of databases, SHOW DATABASES may take a really long time because SENTRY checks if user has any of the following privileges on that database for filtering out the database

DBModelAction.SELECT, DBModelAction.INSERT, DBModelAction.ALTER,
DBModelAction.CREATE, DBModelAction.DROP, DBModelAction.INDEX,
DBModelAction.LOCK

To speedup the authorization checking for this case, Sentry can check only the select privilege for SHOW DATABASES and SHOW TABLES based on configuration.

Issue Links

• links to: Review Link for this case