[jira] [Commented] (SENTRY-541) UdfUri privilege should use itself's privilege rather than anyPrivilege

["Hadoop QA (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SENTRY-541?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14222898#comment-14222898 ] 

Hadoop QA commented on SENTRY-541:
----------------------------------

Here are the results of testing the latest attachment
https://issues.apache.org/jira/secure/attachment/12683305/SENTRY-541.001.patch against master.

{color:green}Overall:{color} +1 all checks pass

{color:green}SUCCESS:{color} all tests passed

Console output: https://builds.apache.org/job/PreCommit-SENTRY-Build/57/console

This message is automatically generated.

> UdfUri privilege should use itself's privilege rather than anyPrivilege
> -----------------------------------------------------------------------
>
>                 Key: SENTRY-541
>                 URL: https://issues.apache.org/jira/browse/SENTRY-541
>             Project: Sentry
>          Issue Type: Bug
>            Reporter: Xiaomeng Huang
>            Assignee: Xiaomeng Huang
>         Attachments: SENTRY-541.001.patch
>
>
> Currently both 'use db' and 'create function' use anyPrivilege, I think 'create funciton' can own itself's privilege which operation scope is ‘URI’ rather than 'CONNECT'. Because the test case in TestHiveAuthzBindings.testValidateCreateFunctionForAdmin make me very confused, we must have column level privilege so that we can pass the authorize. And this jira also block SENTRY-505.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)