You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@kylin.apache.org by "Shaofeng SHI (JIRA)" <ji...@apache.org> on 2017/09/01 05:52:00 UTC

[jira] [Commented] (KYLIN-2720) Should not allow user to access to all tables' metadata of a project

    [ https://issues.apache.org/jira/browse/KYLIN-2720?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16150072#comment-16150072 ] 

Shaofeng SHI commented on KYLIN-2720:
-------------------------------------

Hi mingming, yes I see your patch is very clear. Since 2.1, the design is changed, and query pushdown is introduced, that means without cube user can query the tables (you can take a try). Then filtering the tables by cube is not needed any more.  [~mahongbin] can correct me if my understanding is wrong.

> Should not allow user to access to all tables' metadata of a project
> --------------------------------------------------------------------
>
>                 Key: KYLIN-2720
>                 URL: https://issues.apache.org/jira/browse/KYLIN-2720
>             Project: Kylin
>          Issue Type: Improvement
>            Reporter: qiumingming
>            Assignee: qiumingming
>         Attachments: KYLIN-2720.patch
>
>
> Currently, user can access to all tables and columns metadata of a specific project as long as he can access to this project, which is not reasonable. User should just allow to access to tables that he owned cubes dependent to. However, user can see some other tables in the web UI in current version.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)