You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by "Abhay Kulkarni (JIRA)" <ji...@apache.org> on 2016/10/19 22:01:02 UTC

[jira] [Updated] (RANGER-1190) User has access to a database via tag-based policy - but 'show databases' does not include the database

     [ https://issues.apache.org/jira/browse/RANGER-1190?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Abhay Kulkarni updated RANGER-1190:
-----------------------------------
    Description: 
Scenario: An user has some access to a table/column in a database - exclusively via a tag-based policy. For example: 'hr.employee.ssn' column is tagged as PII and user has 'select' access granted on 'PII' tag. User does not have any other access in 'hr' database.

In this scenario, 'show databases' command in beeline does not include 'hr' database. Since the user has some access into 'hr' database, the user will expect to see 'hr' database in the command result.


  was:
Scenario: An user has some access to a table/column in a database - exclusively via a tag-based policy. For example: 'hr.employee.ssn' column is tagged as PII and user has 'select' access granted on 'PII' tag. User does not have any other access in 'hr' database.

I this scenario, 'show databases' command in beeline does not include 'hr' database. Since the user has some access into 'hr' database, the user will expect to see 'hr' database in the command result.



> User has access to a database via tag-based policy - but 'show databases' does not include the database
> -------------------------------------------------------------------------------------------------------
>
>                 Key: RANGER-1190
>                 URL: https://issues.apache.org/jira/browse/RANGER-1190
>             Project: Ranger
>          Issue Type: Bug
>    Affects Versions: 0.6.0
>            Reporter: Madhan Neethiraj
>
> Scenario: An user has some access to a table/column in a database - exclusively via a tag-based policy. For example: 'hr.employee.ssn' column is tagged as PII and user has 'select' access granted on 'PII' tag. User does not have any other access in 'hr' database.
> In this scenario, 'show databases' command in beeline does not include 'hr' database. Since the user has some access into 'hr' database, the user will expect to see 'hr' database in the command result.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)