You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "Quanlong Huang (JIRA)" <ji...@apache.org> on 2019/01/28 13:29:00 UTC
[jira] [Commented] (IMPALA-6479) Update DESCRIBE statement to
respect column level privileges
[ https://issues.apache.org/jira/browse/IMPALA-6479?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16754004#comment-16754004 ]
Quanlong Huang commented on IMPALA-6479:
----------------------------------------
Hi [~aholley] and [~alex.behm], could you please comment the reason why we revert the commit to branch-2.x?
> Update DESCRIBE statement to respect column level privileges
> ------------------------------------------------------------
>
> Key: IMPALA-6479
> URL: https://issues.apache.org/jira/browse/IMPALA-6479
> Project: IMPALA
> Issue Type: Improvement
> Components: Frontend
> Reporter: Adam Holley
> Assignee: Adam Holley
> Priority: Major
> Fix For: Impala 3.0
>
>
> Currently if a user is granted select on a subset of columns on a table, the DESCRIBE command will show them all columns, and the DESCRIBE FORMATTED/EXTENDED is not allowed.
> This change would update the DESCRIBE command that if a user has select on a subset of columns, it will only show the data from the columns the user has access to. For DESCRIBE FORMATTED/EXTENDED, if a user has some column access, but not all columns, the Location, and View * Text would be removed from the additional metadata.
> The purpose of this change is to increase consumability by allowing tools that allow users to browse data, such a for creating reports, to present only columns they have access to. There is also a security aspect to this fix by not exposing additional data. Other statements such a SHOW COLUMN STATS, will be handled by a separate Jira to be opened.
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org