drill-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bridg...@apache.org
Subject drill-site git commit: updates for 1.6
Date Wed, 16 Mar 2016 00:06:37 GMT
Repository: drill-site
Updated Branches:
  refs/heads/asf-site f81351aa4 -> 8c0f0bda5


updates for 1.6


Project: http://git-wip-us.apache.org/repos/asf/drill-site/repo
Commit: http://git-wip-us.apache.org/repos/asf/drill-site/commit/8c0f0bda
Tree: http://git-wip-us.apache.org/repos/asf/drill-site/tree/8c0f0bda
Diff: http://git-wip-us.apache.org/repos/asf/drill-site/diff/8c0f0bda

Branch: refs/heads/asf-site
Commit: 8c0f0bda56e0f32eace027b6aac6b8aebf91da95
Parents: f81351a
Author: Bridget Bevens <bbevens@maprtech.com>
Authored: Tue Mar 15 17:06:23 2016 -0700
Committer: Bridget Bevens <bbevens@maprtech.com>
Committed: Tue Mar 15 17:06:23 2016 -0700

----------------------------------------------------------------------
 .../index.html                                  |   6 ++-
 .../index.html                                  |  49 ++++++++++++-------
 feed.xml                                        |   4 +-
 images/inboundImpersonation.PNG                 | Bin 0 -> 21216 bytes
 4 files changed, 38 insertions(+), 21 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/drill-site/blob/8c0f0bda/docs/configuring-inbound-impersonation/index.html
----------------------------------------------------------------------
diff --git a/docs/configuring-inbound-impersonation/index.html b/docs/configuring-inbound-impersonation/index.html
index b590c00..2bf0205 100644
--- a/docs/configuring-inbound-impersonation/index.html
+++ b/docs/configuring-inbound-impersonation/index.html
@@ -1050,7 +1050,7 @@
 
     </div>
 
-     
+     Mar 16, 2016
 
     <link href="/css/docpage.css" rel="stylesheet" type="text/css">
 
@@ -1058,7 +1058,9 @@
       
         <p>Drill supports <a href="/docs/configuring-user-impersonation/">user
impersonation</a>  where queries run as the user that created a connection. However,
this user is not necessarily the end user who submits the queries. For example, in a classic
three-tier architecture, the end user interacts with Tableau Desktop, which communicates with
a Tableau Server, which in turn communicates with a Drill cluster. In this scenario, a proxy
user creates a connection, and the queries are submitted to Drill by the proxy user on behalf
of the end user, and not by the end user directly. In this particular case, the query runs
as the end user.  </p>
 
-<p><img src="http://i.imgur.com/R3b4fi0.png" alt="The picture shows how identity
is propagated through various layers (with authentication enabled). The flow on the left is
what Drill currently supports, and the flow on the right is the proposed change. t:euser is
a property on the connection (u is username, p is password, t is impersonation_target).">
 </p>
+<p><img src="/docs/img/inboundImpersonation.PNG" alt="">  </p>
+
+<p>This image shows how identity is propagated through various layers (with authentication
enabled). The flow on the left is Drill with user impersonation enabled, and the flow on the
right is Drill with inbound impersonation enabled. <code>t:euser</code> is a property
on the connection (<code>u</code> is <code>username</code>, <code>p</code>is
<code>password</code>, <code>t</code> is <code>impersonation_target</code>).
 </p>
 
 <p>As of Drill 1.6, an administrator can define inbound impersonation policies to impersonate
the end user. Impersonating the end user is a natural extension of Drill’s impersonation
model and accounts for one more <a href="/docs/configuring-user-impersonation/#chained-impersonation">user
hop in the chain</a>. This additional hop requires authorization, meaning that the proxy
user needs to be authorized to submit queries on behalf of the specified end user. Otherwise,
any user can impersonate another user. Then, the query runs as the end user, and data authorization
is based on this user’s access permissions. Note that without <a href="/docs/configuring-user-authentication/">authentication</a>
enabled in both communication channels, a user can impersonate any other user.</p>
 

http://git-wip-us.apache.org/repos/asf/drill-site/blob/8c0f0bda/docs/sql-window-functions-introduction/index.html
----------------------------------------------------------------------
diff --git a/docs/sql-window-functions-introduction/index.html b/docs/sql-window-functions-introduction/index.html
index 3424c90..294c8b6 100644
--- a/docs/sql-window-functions-introduction/index.html
+++ b/docs/sql-window-functions-introduction/index.html
@@ -1052,7 +1052,7 @@
 
     </div>
 
-     
+     Mar 16, 2016
 
     <link href="/css/docpage.css" rel="stylesheet" type="text/css">
 
@@ -1185,11 +1185,22 @@ To compare, you can run a query using the AVG() function as a standard
set funct
 <div class="highlight"><pre><code class="language-text" data-lang="text">
  expression | column_name [ASC | DESC] [ NULLS { FIRST | LAST } ] [, order_list ]
 </code></pre></div>
 <p>and the optional <em>frame_clause</em> is one of the following frames:</p>
-<div class="highlight"><pre><code class="language-text" data-lang="text">
  RANGE UNBOUNDED PRECEDING
-   RANGE BETWEEN UNBOUNDED PRECEDING AND CURRENT ROW
-   RANGE BETWEEN UNBOUNDED PRECEDING AND UNBOUNDED FOLLOWING
-   ROWS BETWEEN UNBOUNDED PRECEDING AND UNBOUNDED FOLLOWING  
+<div class="highlight"><pre><code class="language-text" data-lang="text">
  { RANGE | ROWS } frame_start
+   { RANGE | ROWS } BETWEEN frame_start AND frame_end  
 </code></pre></div>
+<p>where <em>frame_start</em> is one of the following choices: </p>
+<div class="highlight"><pre><code class="language-text" data-lang="text">
  UNBOUNDED PRECEDING  
+   CURRENT ROW  
+</code></pre></div>
+<p>and <em>frame_end</em> is one of the following choices:  </p>
+<div class="highlight"><pre><code class="language-text" data-lang="text">
  CURRENT ROW  
+   UNBOUNDED FOLLOWING  
+</code></pre></div>
+<div class="admonition note">
+  <p class="first admonition-title">Note</p>
+  <p class="last">The *frame_end* choice cannot appear earlier than the *frame_start*
choice and defaults to CURRENT ROW if not explicitly included.  </p>
+</div>
+
 <h2 id="arguments">Arguments</h2>
 
 <p><em>window_function</em><br>
@@ -1235,22 +1246,26 @@ The name of a column to be partitioned by or ordered by.  </p>
 Specifies sort order, either ascending or descending.  </p>
 
 <p><em>frame_clause</em><br>
-The frame_clause specifies the group of rows that create the window frame. Currently, Drill
only supports the default frame RANGE BETWEEN UNBOUNDED PRECEDING AND CURRENT ROW, which sets
the frame as all rows from the start of the partition through the current row&#39;s last
peer in the ordering, as specified by the ORDER BY clause. The frame also includes ties when
ordering is not unique. You cannot explicitly state the frame specification for ranking window
functions.  </p>
+For window functions that operate on the frame instead of the whole partition, the frame_clause
specifies the group of rows that create the window frame. The frame_clause supports the following
frames:  </p>
+
+<ul>
+<li>RANGE UNBOUNDED PRECEDING</li>
+<li>RANGE BETWEEN CURRENT ROW AND CURRENT ROW</li>
+<li>[RANGE | ROWS] BETWEEN UNBOUNDED PRECEDING AND CURRENT ROW</li>
+<li>[RANGE | ROWS] BETWEEN UNBOUNDED PRECEDING AND UNBOUNDED FOLLOWING<br></li>
+</ul>
+
+<p>The default frame is RANGE BETWEEN UNBOUNDED PRECEDING AND CURRENT ROW, which is
the same as RANGE UNBOUNDED PRECEDING. This frame sets the frame as all rows from the start
of the partition through the current row&#39;s last peer in the ordering, as specified
by the ORDER BY clause.  The frame also includes ties when ordering is not unique.  </p>
 
-<p>When the OVER clause contains an ORDER BY clause, the following frames are equivalent
to the default frame: </p>
-<div class="highlight"><pre><code class="language-text" data-lang="text">
  RANGE UNBOUNDED PRECEDING
-   RANGE BETWEEN UNBOUNDED PRECEDING AND CURRENT ROW  
-</code></pre></div>
-<p>When the OVER clause does not contain an ORDER BY clause, the following frames are
equivalent to the default frame:  </p>
-<div class="highlight"><pre><code class="language-text" data-lang="text">
  RANGE BETWEEN UNBOUNDED PRECEDING AND UNBOUNDED FOLLOWING
-   ROWS BETWEEN UNBOUNDED PRECEDING AND UNBOUNDED FOLLOWING  
-</code></pre></div>
 <p>The following delimiters define the frame:  </p>
 
 <ul>
-<li>UNBOUNDED PRECEDING means that the frame starts with the first row of the partition.</li>
-<li>UNBOUNDED FOLLOWING means that the frame ends with the last row of the partition.</li>
-<li>CURRENT ROW means that the frame starts or ends with the current row’s first
or last peer in the ORDER BY list.<br></li>
+<li>UNBOUNDED PRECEDING<br>
+The frame starts with the first row of the partition.<br></li>
+<li>UNBOUNDED FOLLOWING<br>
+The frame ends with the last row of the partition, for both ROW and RANGE modes.<br></li>
+<li>CURRENT ROW<br>
+In ROWS mode, CURRENT ROW means that the frame starts or ends with the current row. In RANGE
mode, CURRENT ROW means that the frame starts or ends with the current row’s first or last
peer in the ORDER BY ordering.</li>
 </ul>
 
 <h2 id="usage-notes">Usage Notes</h2>

http://git-wip-us.apache.org/repos/asf/drill-site/blob/8c0f0bda/feed.xml
----------------------------------------------------------------------
diff --git a/feed.xml b/feed.xml
index 3f3e8a3..e6e2cd7 100644
--- a/feed.xml
+++ b/feed.xml
@@ -6,8 +6,8 @@
 </description>
     <link>/</link>
     <atom:link href="/feed.xml" rel="self" type="application/rss+xml"/>
-    <pubDate>Tue, 15 Mar 2016 16:46:35 -0700</pubDate>
-    <lastBuildDate>Tue, 15 Mar 2016 16:46:35 -0700</lastBuildDate>
+    <pubDate>Tue, 15 Mar 2016 17:04:18 -0700</pubDate>
+    <lastBuildDate>Tue, 15 Mar 2016 17:04:18 -0700</lastBuildDate>
     <generator>Jekyll v2.5.2</generator>
     
       <item>

http://git-wip-us.apache.org/repos/asf/drill-site/blob/8c0f0bda/images/inboundImpersonation.PNG
----------------------------------------------------------------------
diff --git a/images/inboundImpersonation.PNG b/images/inboundImpersonation.PNG
new file mode 100644
index 0000000..e87cb48
Binary files /dev/null and b/images/inboundImpersonation.PNG differ


Mime
View raw message