[jira] [Created] (SENTRY-745) Grant select on view2 created from view1, select from view2 fails, it requires select privilege from view1

[Anne Yu (JIRA)]

Anne Yu created SENTRY-745:
------------------------------

             Summary: Grant select on view2 created from view1, select from 
view2 fails, it requires select privilege from view1
                 Key: SENTRY-745
                 URL: https://issues.apache.org/jira/browse/SENTRY-745
             Project: Sentry
          Issue Type: Bug
          Components: Core
    Affects Versions: 1.4.0, 1.5.0
            Reporter: Anne Yu
            Assignee: Colin Ma
             Fix For: 1.5.0


Create view_from_test_complex_view from test_complex_view:
{code}
describe formatted view2_from_test_view1;
| View Expanded Text:           | SELECT `userid` AS `userid`, `link` AS `link` 
FROM (SELECT userid,link from `test_complex_view_database`.`test_complex_view`) 
`test_complex_view_database.view_from_test_complex_view`  | NULL
{code}

Grant select to a test group, use a user from that group to select will 
encounter privilege error:
{code}
0: jdbc:hive2://anneyu-sentry-ha-10-4.ent.clo> select * from 
view2_from_test_view1;
Error: Error while compiling statement: FAILED: SemanticException No valid 
privileges
 Required privileges for this query: 
Server=server1->Db=test_complex_view_database->Table=test_complex_view->action=select;
 (state=42000,code=40000)
{code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)