tree 9e27d994e98e844a97d5e59eca4df2f524e4aca1
parent 4d9d6b49566cd99a06cf6bd4f1d202b7cfedead8
author stiga-huang <huangquanlong@gmail.com> 1576241762 +0800
committer Impala Public Jenkins <impala-public-jenkins@cloudera.com> 1576794936 +0000

IMPALA-9231: support customized privilege checks for SHOW visibility

In IMPALA-9002 we introduce a flag simplify_check_on_show_tables which
simplifies privilege checks for SHOW TABLES. Only tables with privileges
implying SELECT privilege will be shown.

This patch provides the same mechanism for SHOW DATABASES. Also augment
the flag to be a list of privilege names and rename it to
min_privilege_set_for_show_stmts. The default value is "any" which
remains the default behavior. If set to "select", only dbs/tables on
which the user has SELECT privilege will be shown. If set to
"select,insert", only dbs/tables on which the user has SELECT or INSERT
privilege will be shown.

Tests:
 - Add tests in test_authorization.py

Change-Id: I631fc5c386a52f0a1f62182473be15fcc3dd8609
Reviewed-on: http://gerrit.cloudera.org:8080/14904
Reviewed-by: Impala Public Jenkins <impala-public-jenkins@cloudera.com>
Tested-by: Impala Public Jenkins <impala-public-jenkins@cloudera.com>