Mailing-List: contact reviews-help@impala.incubator.apache.org; run by ezmlm
Precedence: bulk
Message-Id: <201706052158.v55LwscU022383@ip-10-146-233-104.ec2.internal>
Date: Mon, 5 Jun 2017 21:58:54 +0000
From: "Taras Bobrovytsky (Code Review)" <gerrit@cloudera.org>
To: impala-cr@cloudera.com, reviews@impala.incubator.apache.org
Reply-To: tbobrovytsky@cloudera.com
Subject: =?UTF-8?Q?=5BImpala-ASF-CR=5D_IMPALA-5355=3A_Fix_the_order_of_Sentry_roles_and_privileges=0A?=
In-Reply-To: <gerrit.1495848501000.I7072e95b74952ce5a51ea1b6e2ae3e80fb0940e0@gerrit.cloudera.org>
References: <gerrit.1495848501000.I7072e95b74952ce5a51ea1b6e2ae3e80fb0940e0@gerrit.cloudera.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
User-Agent: Gerrit/2.12.7
archived-at: Mon, 05 Jun 2017 21:58:59 -0000

Taras Bobrovytsky has uploaded a new patch set (#3).

Change subject: IMPALA-5355: Fix the order of Sentry roles and privileges
......................................................................

IMPALA-5355: Fix the order of Sentry roles and privileges

After a single Impalad is restarted, it is possible that order in which
it receives roles and privileges from the statestore is incorrect. The
correct order is for the role to appear first in the update, before the
privilege that references it.

If a user updates a role, it's catalog version number can become larger
than the catalog numbers of the privileges that reference it. This
causes the role to come after the privilege in the initial metastore
update. We fix the issue by incrementing the catalog version of the
privileges when a role is updated

Testing:
- Added a test that reproduced the problem.

Change-Id: I7072e95b74952ce5a51ea1b6e2ae3e80fb0940e0
---
M fe/src/main/java/org/apache/impala/catalog/ImpaladCatalog.java
M tests/authorization/test_grant_revoke.py
M tests/common/impala_test_suite.py
3 files changed, 79 insertions(+), 10 deletions(-)


  git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/04/7004/3
-- 
To view, visit http://gerrit.cloudera.org:8080/7004
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I7072e95b74952ce5a51ea1b6e2ae3e80fb0940e0
Gerrit-PatchSet: 3
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-Owner: Taras Bobrovytsky <tbobrovytsky@cloudera.com>
Gerrit-Reviewer: Alex Behm <alex.behm@cloudera.com>
Gerrit-Reviewer: Dimitris Tsirogiannis <dtsirogiannis@cloudera.com>
Gerrit-Reviewer: Taras Bobrovytsky <tbobrovytsky@cloudera.com>