waggle-dance icon indicating copy to clipboard operation
waggle-dance copied to clipboard

Reduce number of options for Access Control Type

Open AnanaMJ opened this issue 6 years ago • 0 comments

As a developer I'd like to have only READ_ONLY, READ_AND_WRITE and READ_WRITE_AND_CREATE as access control type options As to have a more intuitive behaviour of the configuration


The complete current options are READ_ONLY, READ_AND_WRITE_AND_CREATE, READ_AND_WRITE_AND_CREATE_ON_DATABASE_WHITELIST and READ_AND_WRITE_ON_DATABASE_WHITELIST.

However (from documentation):

Primary metastores can configure access-control-type to have any of the described access-control-types whereas federated metastores may only be configured to READ_ONLY and READ_AND_WRITE_ON_DATABASE_WHITELIST.

Changing the functionality to replace READ_AND_WRITE_AND_CREATE_ON_DATABASE_WHITELIST with READ_AND_WRITE_AND_CREATE and rename READ_AND_WRITE_ON_DATABASE_WHITELIST to READ_AND_WRITE might make the behaviour more intuitive. The difference would be that the primary metastore would not be able to create databases without adding them into the primary-meta-store.writable-database-white-list property, and writing would only be allowed to be done on databases in the whitelist for both types of metastores.

AnanaMJ avatar Feb 07 '19 16:02 AnanaMJ