You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@sentry.apache.org by "Hadoop QA (JIRA)" <ji...@apache.org> on 2018/06/14 01:15:00 UTC

[jira] [Commented] (SENTRY-2270) Illegal privileges on columns can be granted on Hive

    [ https://issues.apache.org/jira/browse/SENTRY-2270?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16511873#comment-16511873 ] 

Hadoop QA commented on SENTRY-2270:
-----------------------------------

Here are the results of testing the latest attachment
https://issues.apache.org/jira/secure/attachment/12927732/SENTRY-2270.1.patch against master.

{color:green}Overall:{color} +1 all checks pass

{color:green}SUCCESS:{color} all tests passed

Console output: https://builds.apache.org/job/PreCommit-SENTRY-Build/3884/console

This message is automatically generated.

> Illegal privileges on columns can be granted on Hive
> ----------------------------------------------------
>
>                 Key: SENTRY-2270
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2270
>             Project: Sentry
>          Issue Type: Bug
>          Components: Sentry
>    Affects Versions: 2.0.0
>            Reporter: Sergio Peña
>            Assignee: Sergio Peña
>            Priority: Major
>         Attachments: SENTRY-2270.1.patch
>
>
> It is possible to grant the following privileges on columns in beeline: ALTER, CREATE, DROP. However, these privileges have no semantics for a column.
> For ALL, and INSERT, beeline raises an error if the user tries to grant the privilege to a column, e.g.:
> {noformat}
> beeline> grant all(fn) on table tbl1 to role r1;
> Error: Error while compiling statement: FAILED: SemanticException Sentry does not support privilege: All on Column (state=42000,code=40000)
> beeline> grant insert(fn) on table tbl1 to role r1;
> Error: Error while compiling statement: FAILED: SemanticException Sentry does not support privilege: Insert on Column (state=42000,code=40000)
> {noformat}
> A similar error should be created when granting CREATE, ALTER, and DROP on column.
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)