hawq-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hongxu Ma (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HAWQ-1279) Force to recompute namespace_path when enable_ranger
Date Tue, 17 Jan 2017 08:57:26 GMT
Hongxu Ma created HAWQ-1279:
-------------------------------

             Summary: Force to recompute namespace_path when enable_ranger
                 Key: HAWQ-1279
                 URL: https://issues.apache.org/jira/browse/HAWQ-1279
             Project: Apache HAWQ
          Issue Type: Sub-task
            Reporter: Hongxu Ma
            Assignee: Ed Espino


namespace_path is cached in each psql session and it the cache invalidation is triggered by
Grant/Revoke SQL.

When enable_ranger, Grant/Revoke SQL is no longer use, so the cache prevent a ack-check request
sending.

Example:
```
// create table t(i int); => failed
[{""resource"":{""database"":""postgres"",""schema"":""pg_catalog""},""privileges"":[""usage""],""allowed"":true}]
[{""resource"":{""database"":""postgres"",""schema"":""pg_catalog""},""privileges"":[""usage""],""allowed"":true}]
[{""resource"":{""database"":""postgres"",""schema"":""public""},""privileges"":[""usage""],""allowed"":false}]

// grant usage and create permissions to public schema in ranger and try again => failed
again
[{""resource"":{""database"":""postgres"",""schema"":""pg_catalog""},""privileges"":[""usage""],""allowed"":true}]
[{""resource"":{""database"":""postgres"",""schema"":""pg_catalog""},""privileges"":[""usage""],""allowed"":true}]
// why not send a request for USAGE??
```



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message