[jira] [Created] (IMPALA-5998) Explain authorization error

["Jamison Bennett (JIRA)" <ji...@apache.org>]

Jamison Bennett created IMPALA-5998:
---------------------------------------

             Summary: Explain authorization error
                 Key: IMPALA-5998
                 URL: https://issues.apache.org/jira/browse/IMPALA-5998
             Project: IMPALA
          Issue Type: Bug
    Affects Versions: Impala 2.9.0
            Reporter: Jamison Bennett


I think there is an error in the permission checking for explaining a view.

Steps to reproduce:
su impala
impala-shell
create role systest_role;
grant role systest_role to group systest;
create database test;
create table test.employees (firstname string, lastname string, salary int);
grant select(firstname,lastname) on table test.employees to role systest_role;
insert into table test.employees (firstname, lastname, salary) values ("John", "Smith", 12345);
create view test.employees_view as select firstname, lastname from test.employees;
grant select on table test.employees_view to role systest_role;
quit;
exit
su systest
impala-shell
select * from test.employees_view;
explain select * from test.employees_view;

The explain statement produces the following error:

ERROR: AuthorizationException: User 'systest@GCE.CLOUDERA.COM' does not have privileges to EXPLAIN this statement.

I think the above explain should be authorized because the following equivalent explain is authorized:
explain select * from (select firstname, lastname from test.employees) as q;



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)