You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sentry.apache.org by "Anne Yu (JIRA)" <ji...@apache.org> on 2015/05/27 18:33:17 UTC

[jira] [Updated] (SENTRY-745) Grant select on view2 created from view1, select from view2 fails, it requires select privilege from view1

     [ https://issues.apache.org/jira/browse/SENTRY-745?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Anne Yu updated SENTRY-745:
---------------------------
    Description: 
Create view_from_test_complex_view from test_complex_view:
{code}
describe formatted view_from_test_complex_view;
| View Expanded Text:           | SELECT `userid` AS `userid`, `link` AS `link` FROM (SELECT userid,link from `test_complex_view_database`.`test_complex_view`) `test_complex_view_database.view_from_test_complex_view`  | NULL
{code}

Grant select to a test group, use a user from that group to select will encounter privilege error:
{code}
0: jdbc:hive2://anneyu-sentry-ha-10-4.ent.clo> select * from view2_from_test_view1;
Error: Error while compiling statement: FAILED: SemanticException No valid privileges
 Required privileges for this query: Server=server1->Db=test_complex_view_database->Table=test_complex_view->action=select; (state=42000,code=40000)
{code}

  was:
Create view_from_test_complex_view from test_complex_view:
{code}
describe formatted view2_from_test_view1;
| View Expanded Text:           | SELECT `userid` AS `userid`, `link` AS `link` FROM (SELECT userid,link from `test_complex_view_database`.`test_complex_view`) `test_complex_view_database.view_from_test_complex_view`  | NULL
{code}

Grant select to a test group, use a user from that group to select will encounter privilege error:
{code}
0: jdbc:hive2://anneyu-sentry-ha-10-4.ent.clo> select * from view2_from_test_view1;
Error: Error while compiling statement: FAILED: SemanticException No valid privileges
 Required privileges for this query: Server=server1->Db=test_complex_view_database->Table=test_complex_view->action=select; (state=42000,code=40000)
{code}


> Grant select on view2 created from view1, select from view2 fails, it requires select privilege from view1
> ----------------------------------------------------------------------------------------------------------
>
>                 Key: SENTRY-745
>                 URL: https://issues.apache.org/jira/browse/SENTRY-745
>             Project: Sentry
>          Issue Type: Bug
>          Components: Core
>    Affects Versions: 1.4.0, 1.5.0
>            Reporter: Anne Yu
>            Assignee: Colin Ma
>             Fix For: 1.5.0
>
>
> Create view_from_test_complex_view from test_complex_view:
> {code}
> describe formatted view_from_test_complex_view;
> | View Expanded Text:           | SELECT `userid` AS `userid`, `link` AS `link` FROM (SELECT userid,link from `test_complex_view_database`.`test_complex_view`) `test_complex_view_database.view_from_test_complex_view`  | NULL
> {code}
> Grant select to a test group, use a user from that group to select will encounter privilege error:
> {code}
> 0: jdbc:hive2://anneyu-sentry-ha-10-4.ent.clo> select * from view2_from_test_view1;
> Error: Error while compiling statement: FAILED: SemanticException No valid privileges
>  Required privileges for this query: Server=server1->Db=test_complex_view_database->Table=test_complex_view->action=select; (state=42000,code=40000)
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)