You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@sentry.apache.org by "Sergio Peña (JIRA)" <ji...@apache.org> on 2018/07/10 16:14:00 UTC

[jira] [Created] (SENTRY-2308) Create privilege on table has no use case

Sergio Peña created SENTRY-2308:
-----------------------------------

             Summary: Create privilege on table has no use case
                 Key: SENTRY-2308
                 URL: https://issues.apache.org/jira/browse/SENTRY-2308
             Project: Sentry
          Issue Type: Bug
          Components: Sentry
    Affects Versions: 2.1.0
            Reporter: Sergio Peña


Currently it is possible to grant CREATE on a table. However, there do not seem to be any SQL operations that require this privilege. 

For example, ALTER TABLE ADD PARTITION, requires ALTER and not CREATE. 

Here is another example that requires INSERT on the target table, not CREATE (or ALTER):

{noformat}
set hive.exec.dynamic.partition.mode=nonstrict;INSERT OVERWRITE TABLE config1_test_database1.aliens PARTITION (home_planet, diet) SELECT name, home_planet, diet FROM config1_test_database1.movie_stars WHERE home_planet IS NOT NULL AND diet IS NOT NULL;
{noformat}

If there is no use case for granting CREATE on a table, we should considering not allowing this operation. 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)