diff --git a/docs/src/main/sphinx/admin/resource-groups.md b/docs/src/main/sphinx/admin/resource-groups.md index ff408d4eaa26..8f0990587bf3 100644 --- a/docs/src/main/sphinx/admin/resource-groups.md +++ b/docs/src/main/sphinx/admin/resource-groups.md @@ -199,7 +199,11 @@ documentation](https://docs.oracle.com/en/java/javase/24/docs/api/java.base/java - `DATA_DEFINITION`: Queries that affect the data definition. These include `CREATE`, `ALTER`, and `DROP` statements for schemas, tables, views, and materialized views, as well as statements that manage prepared statements, - privileges, sessions, and transactions. + privileges, sessions, and transactions. When external clients need + access to the `system.runtime.kill_query()` procedure to stop running or + queued queries, this `queryType` must be used to make sure the + `kill_query()` is executed directly and isn't queued to wait for the + initial query to finish. - `ALTER_TABLE_EXECUTE`: Queries that execute table procedures with [ALTER TABLE EXECUTE](alter-table-execute). diff --git a/docs/src/main/sphinx/security/ranger-access-control.md b/docs/src/main/sphinx/security/ranger-access-control.md index a1e5e4cdbb43..897680f2e3a0 100644 --- a/docs/src/main/sphinx/security/ranger-access-control.md +++ b/docs/src/main/sphinx/security/ranger-access-control.md @@ -193,3 +193,7 @@ The following table lists the configuration properties for the Ranger access con execute any query. * To allow this, create a policy in Apache Ranger for a `trinouser` resource with value `{USER}` and with the `impersonate` permission for user `{USER}`. +* External clients can use the `system.runtime.kill_query()` procedure to + kill running queries. Add a policy with Schema `system`, Database + `runtime` and Procedure `kill_query` with `execute` permission for user + `{USER}`.