You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "Fredy Wijaya (JIRA)" <ji...@apache.org> on 2018/10/08 16:11:00 UTC

[jira] [Commented] (IMPALA-6891) AuthorizationException in CROSS JOIN

    [ https://issues.apache.org/jira/browse/IMPALA-6891?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16642072#comment-16642072 ] 

Fredy Wijaya commented on IMPALA-6891:
--------------------------------------

Closing this ticket because this isn't a bug since we treat a.* != * in the above statement.

> AuthorizationException in CROSS JOIN
> ------------------------------------
>
>                 Key: IMPALA-6891
>                 URL: https://issues.apache.org/jira/browse/IMPALA-6891
>             Project: IMPALA
>          Issue Type: Bug
>          Components: Frontend
>    Affects Versions: Impala 2.9.0, Impala 2.10.0, Impala 2.11.0
>            Reporter: Fredy Wijaya
>            Assignee: Adam Holley
>            Priority: Minor
>              Labels: security
>
> {noformat}
> [localhost:21000] foo> create table t1(i int, j int);
> [localhost:21000] foo> create table t2(i int, j int);
> [localhost:21000] foo> grant select(i) on table foo.t1 to role test_role;
> [localhost:21000] foo> grant select(j) on table foo.t1 to role test_role;
> [localhost:21000] foo> grant select(i) on table foo.t2 to role test_role;
> [localhost:21000] foo> grant select(j) on table foo.t2 to role test_role;{noformat}
> {noformat}
> [localhost:21000] foo> select * from foo.t1 a cross join foo.t2 b;
> Fetched 0 row(s) in 0.14s
> [localhost:21000] foo> select a.* from foo.t1 a cross join foo.t2 b;
> ERROR: AuthorizationException: User 'xyz' does not have privileges to execute 'SELECT' on: foo.t2{noformat}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org