You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "Quanlong Huang (JIRA)" <ji...@apache.org> on 2019/06/14 02:21:00 UTC

[jira] [Updated] (IMPALA-7059) Inconsistent privilege model between DESCRIBE and DESCRIBE DATABASE

     [ https://issues.apache.org/jira/browse/IMPALA-7059?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Quanlong Huang updated IMPALA-7059:
-----------------------------------
    Fix Version/s: Impala 2.13.0

> Inconsistent privilege model between DESCRIBE and DESCRIBE DATABASE
> -------------------------------------------------------------------
>
>                 Key: IMPALA-7059
>                 URL: https://issues.apache.org/jira/browse/IMPALA-7059
>             Project: IMPALA
>          Issue Type: Bug
>          Components: Frontend
>    Affects Versions: Impala 3.0
>            Reporter: Fredy Wijaya
>            Assignee: Fredy Wijaya
>            Priority: Major
>              Labels: security
>             Fix For: Impala 2.13.0, Impala 3.1.0
>
>
> {noformat}
> [localhost:21000] default> grant insert on database functional to role foo_role;                                                                                                                                                             
> Query: grant insert on database functional to role foo_role
> Query submitted at: 2018-07-11 11:05:51 (Coordinator: http://fwijaya-impala-dev3.vpc.cloudera.com:25000)
> Query progress can be monitored at: http://fwijaya-impala-dev3.vpc.cloudera.com:25000/query_plan?query_id=4a45c33de497d745:8242abc400000000
> +---------------------------------+
> | summary                         |
> +---------------------------------+
> | Privilege(s) have been granted. |
> +---------------------------------+
> Fetched 1 row(s) in 0.13s
> [localhost:21000] default> describe functional.alltypes;
> Query: describe functional.alltypes
> Fetched 0 row(s) in 5.45s
> [localhost:21000] default> describe database functional;
> Query: describe database functional
> +------------+-----------------------------------------------------+---------+
> | name       | location                                            | comment |
> +------------+-----------------------------------------------------+---------+
> | functional | hdfs://localhost:20500/test-warehouse/functional.db |         |
> +------------+-----------------------------------------------------+---------+
> {noformat}
> For consistency with privileges on other metadata SQL statements, such as DESCRIBE DATABASE, we should register VIEW_METADATA privilege instead of just SELECT.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org