You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@sentry.apache.org by "Na Li (JIRA)" <ji...@apache.org> on 2019/02/15 15:45:00 UTC

[jira] [Created] (SENTRY-2500) CREATE on server does not provide HMS server side read authorization for get_all_tables(database_name)

Na Li created SENTRY-2500:
-----------------------------

             Summary: CREATE on server does not provide HMS server side read authorization for get_all_tables(database_name)
                 Key: SENTRY-2500
                 URL: https://issues.apache.org/jira/browse/SENTRY-2500
             Project: Sentry
          Issue Type: Bug
          Components: Sentry
    Affects Versions: 2.2.0
            Reporter: Na Li
            Assignee: Na Li


If a user has CREATE privileges on server, they are not able to see any tables with the direct call to the HMS api method get_all_tables when server side filtering is enabled.

Ideally, CREATE privileges on server should give one an unfiltered view of the tables when the user with that privilege calls HMS api method get_all_tables(database_name).

The solution is to add "CREATE" privilege as one of the required privileges (any one of the privilege will allow) in listing table operation.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)