You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "Fredy Wijaya (JIRA)" <ji...@apache.org> on 2018/10/08 16:11:00 UTC
[jira] [Commented] (IMPALA-6891) AuthorizationException in CROSS
JOIN
[ https://issues.apache.org/jira/browse/IMPALA-6891?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16642072#comment-16642072 ]
Fredy Wijaya commented on IMPALA-6891:
--------------------------------------
Closing this ticket because this isn't a bug since we treat a.* != * in the above statement.
> AuthorizationException in CROSS JOIN
> ------------------------------------
>
> Key: IMPALA-6891
> URL: https://issues.apache.org/jira/browse/IMPALA-6891
> Project: IMPALA
> Issue Type: Bug
> Components: Frontend
> Affects Versions: Impala 2.9.0, Impala 2.10.0, Impala 2.11.0
> Reporter: Fredy Wijaya
> Assignee: Adam Holley
> Priority: Minor
> Labels: security
>
> {noformat}
> [localhost:21000] foo> create table t1(i int, j int);
> [localhost:21000] foo> create table t2(i int, j int);
> [localhost:21000] foo> grant select(i) on table foo.t1 to role test_role;
> [localhost:21000] foo> grant select(j) on table foo.t1 to role test_role;
> [localhost:21000] foo> grant select(i) on table foo.t2 to role test_role;
> [localhost:21000] foo> grant select(j) on table foo.t2 to role test_role;{noformat}
> {noformat}
> [localhost:21000] foo> select * from foo.t1 a cross join foo.t2 b;
> Fetched 0 row(s) in 0.14s
> [localhost:21000] foo> select a.* from foo.t1 a cross join foo.t2 b;
> ERROR: AuthorizationException: User 'xyz' does not have privileges to execute 'SELECT' on: foo.t2{noformat}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org