You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2019/04/16 20:25:00 UTC
[jira] [Commented] (IMPALA-6718) Add support column-level
permissions on views
[ https://issues.apache.org/jira/browse/IMPALA-6718?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16819460#comment-16819460 ]
ASF subversion and git services commented on IMPALA-6718:
---------------------------------------------------------
Commit 53798b0454332df44efce0032a88ef49e770a095 in impala's branch refs/heads/master from Fredy Wijaya
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=53798b0 ]
IMPALA-6718: Add support for column-level permissions on views
This patch adds support for column-level permissions on views. This
behavior is compatible with Hive column-level permissons on views. The
following statements are now supported.
GRANT select(col) ON db.my_view TO ROLE my_role -- Sentry only
REVOKE select(col) ON db.my_view FROM ROLE my_role -- Sentry only
GRANT select(col) ON db.my_view TO USER my_user -- Ranger only
REVOKE select(col) ON db.my_view FROM USER my_user -- Ranger only
GRANT select(col) ON db.my_view TO GROUP my_group -- Ranger only
REVOKE select(col) ON db.my_view FROM GROUP my_group -- Ranger only
Testing:
- Updated AuthorizationStmtTest to with new test cases
- Ran all FE tests
- Ran all E2E authorization tests
Change-Id: If81e683212cba22cc0fa5fc091ec3c799fa33e14
Reviewed-on: http://gerrit.cloudera.org:8080/12959
Reviewed-by: Impala Public Jenkins <im...@cloudera.com>
Tested-by: Impala Public Jenkins <im...@cloudera.com>
> Add support column-level permissions on views
> ---------------------------------------------
>
> Key: IMPALA-6718
> URL: https://issues.apache.org/jira/browse/IMPALA-6718
> Project: IMPALA
> Issue Type: Sub-task
> Components: Frontend
> Affects Versions: Impala 2.11.0
> Reporter: Adam Holley
> Assignee: Fredy Wijaya
> Priority: Critical
> Labels: security, usability
> Fix For: Impala 3.3.0
>
>
> Column-level permissions on views are not supported: https://github.com/apache/impala/blob/da153104f26ef94f1b4db323f5629d678c55f9ee/fe/src/main/java/org/apache/impala/analysis/PrivilegeSpec.java#L248-L251
> This means "GRANT SELECT(COLUMN) on <view>" will throw an exception. Impala needs to be updated to support column-level permissions on views.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org