hawq-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Chunling Wang (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HAWQ-1249) Don't do ACL checks on segments
Date Tue, 03 Jan 2017 09:55:58 GMT
Chunling Wang created HAWQ-1249:
-----------------------------------

             Summary: Don't do ACL checks on segments
                 Key: HAWQ-1249
                 URL: https://issues.apache.org/jira/browse/HAWQ-1249
             Project: Apache HAWQ
          Issue Type: Sub-task
          Components: Security
            Reporter: Chunling Wang
            Assignee: Ed Espino


HAWQ does ACL checks on segments, which we think is not necessary for QE because there is
no catalog data on segments. Even a hacker can connect to a segdb with GP_ROLE_EXECUTE, he
can not do any queries while he can do on Greenplum for there is catalog data on segments.
Further more, in ranger checks, if all segments do same checks as master with RPS, it costs
a lot and effects the performance.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message