tree ccf0109bcbc41c7df8d369cfb12a0f1e6a16f0d5
parent 234fb8592bfa7bc8cae415a769789b39f5aba5ca
author Fang-Yu Rao <fangyu.rao@cloudera.com> 1778543039 -0700
committer Michael Smith <michael.smith@cloudera.com> 1783797120 +0000

IMPALA-14956: Produce Ranger audit events for GRANT/REVOKE ROLE

Due to RANGER-5595, Impala could not produce Ranger audit events for
the GRANT/REVOKE ROLE statements. This patch works around this issue by
mimicking what RangerHiveAuthorizer#grantRole() does at
https://github.com/apache/ranger/blob/3fd46db/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java#L609-L612.

On a related note, adding the test cases for the GRANT/REVOKE privilege
statements is not in the scope of this JIRA. IMPALA-15011 was created to
keep track of this.

Testing:
 - Added Java test cases to verify Ranger audit events could be produced
   for the GRANT/REVOKE ROLE statements.

Change-Id: I7e0527af0532749817ea538c253262a5e2a65c61
Reviewed-on: http://gerrit.cloudera.org:8080/24315
Reviewed-by: Michael Smith <michael.smith@cloudera.com>
Tested-by: Impala Public Jenkins <impala-public-jenkins@cloudera.com>
Reviewed-by: Jason Fehr <jfehr@cloudera.com>