[jira] [Commented] (SENTRY-849) [column level privilege] without table level privilege and column level privilege for column i, test user can still explain select column from test_tb;

["kalyan kumar kalvagadda (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SENTRY-849?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16357747#comment-16357747 ] 

kalyan kumar kalvagadda commented on SENTRY-849:
------------------------------------------------

[~qianbo] Is the fix for this issue committed?

> [column level privilege] without table level privilege and column level privilege for column i, test user can still explain select column from test_tb;
> -------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: SENTRY-849
>                 URL: https://issues.apache.org/jira/browse/SENTRY-849
>             Project: Sentry
>          Issue Type: Bug
>    Affects Versions: 1.5.1
>            Reporter: Anne Yu
>            Assignee: shenguoquan
>            Priority: Major
>
> {code}
> 0: jdbc:hive2://anneyu-cdh55-1.vpc.cloudera.c> show grant role test_role on table test_tb;
> +-----------+----------+------------+---------+-----------------+-----------------+------------+---------------+-------------------+----------+--+
> | database  |  table   | partition  | column  | principal_name  | principal_type  | privilege  | grant_option  |    grant_time     | grantor  |
> +-----------+----------+------------+---------+-----------------+-----------------+------------+---------------+-------------------+----------+--+
> | test_db   | test_tb  |            | s       | test_role       | ROLE            | select     | false         | 1439502394526000  | --       |
> +-----------+----------+------------+---------+-----------------+-----------------+------------+---------------+-------------------+----------+--+
> {code}
> However explain "select i from test_tb" shows the column "i" test_user doesn't have privileges.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)