You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@sentry.apache.org by "guoquan (JIRA)" <ji...@apache.org> on 2015/03/18 06:22:46 UTC

[jira] [Updated] (SENTRY-541) Seperate udfuri privilege from anyPrivilege model

     [ https://issues.apache.org/jira/browse/SENTRY-541?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

guoquan updated SENTRY-541:
---------------------------
    Fix Version/s: 1.5.0

> Seperate udfuri privilege from anyPrivilege model
> -------------------------------------------------
>
>                 Key: SENTRY-541
>                 URL: https://issues.apache.org/jira/browse/SENTRY-541
>             Project: Sentry
>          Issue Type: Bug
>            Reporter: Xiaomeng Huang
>            Assignee: Xiaomeng Huang
>             Fix For: 1.5.0
>
>         Attachments: SENTRY-541.001.patch, SENTRY-541.002.patch, SENTRY-541.003.patch
>
>
> Currently both 'use db' and 'create function' use anyPrivilege, I think 'create funciton' can own itself's privilege which operation scope is ‘URI’ rather than 'CONNECT'. Because the test case in TestHiveAuthzBindings.testValidateCreateFunctionForAdmin make me very confused, we must have column level privilege so that we can pass the authorize. And this jira also block SENTRY-505.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)