Uploaded image for project: 'IMPALA'
  1. IMPALA
  2. IMPALA-3620

Consider implementing PrivilegeCache with listPrivileges based on authorization hierarchy

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Duplicate
    • Impala 2.5.0
    • None
    • Catalog
    • None

    Description

      Impala's authentication can be slow on get_schema and show databases etc. due to Sentry's implementation.

      Once they have https://issues.apache.org/jira/browse/SENTRY-1291 in place.

      Impala should use their new api listPrivileges for authentication. According to Hao Hao from Sentry team, improvement is 15x with many roles/grants in Hive.

      Attachments

        Issue Links

          duplicates

          Improvement - An improvement or enhancement to an existing feature or task. IMPALA-9242 Access check should only check against the privileges of the authorizable

          • Major - Major loss of function.
          • Resolved
          is blocked by

          Sub-task - The sub-task of the issue IMPALA-3223 Make git.apache.org code buildable

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Activity

            People

              Unassigned Unassigned
              HuaisiXu Huaisi Xu
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: