You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Abhay Kulkarni (JIRA)" <ji...@apache.org> on 2018/03/28 00:46:00 UTC
[jira] [Updated] (RANGER-2045) Hive table columns with no explicit
allow policy are listed with 'desc table' command
[ https://issues.apache.org/jira/browse/RANGER-2045?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Abhay Kulkarni updated RANGER-2045:
-----------------------------------
Summary: Hive table columns with no explicit allow policy are listed with 'desc table' command (was: Hive column filter flag functionality has regression bug for 'xasecure.hive.describetable.showcolumns.authorization.option' set to 'none')
> Hive table columns with no explicit allow policy are listed with 'desc table' command
> -------------------------------------------------------------------------------------
>
> Key: RANGER-2045
> URL: https://issues.apache.org/jira/browse/RANGER-2045
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: Anuja Leekha
> Assignee: Abhay Kulkarni
> Priority: Major
>
> *Test scenario*
> 'xasecure.hive.describetable.showcolumns.authorization.option' set to 'none'
> Database 'testdb' has a table 'testtable1' with 3 columns 'name', 'age', 'city'.
> Hive Policy exists giving user 'hrt_1' 'select' privilege on DB='testdb', table='testtable1' and columns='name', 'age' [user does not have permissions on 'city' column].
> "DESCRIBE testdb.testtable1" and "show columns in testdb.testtable1" commands show results with 'city' column included.
> When 'xasecure.hive.describetable.showcolumns.authorization.option' is set to 'none', Hive would follow default behavior and should deny DESCRIBE table and show column commands as the policy does not grant the test user access to all columns of the table. But the commands go through fine.
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)