[jira] [Commented] (SENTRY-847) [column level privilege] if grant column level privilege to user, show columns in table shouldn't require extra table level privilege

[Dapeng Sun (JIRA)]

    [ 
https://issues.apache.org/jira/browse/SENTRY-847?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14977878#comment-14977878
 ] 

Dapeng Sun commented on SENTRY-847:
-----------------------------------

Cherry pick this jira to hive_plugin_v2

> [column level privilege] if grant column level privilege to user, show 
> columns in table shouldn't require extra table level privilege
> -------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: SENTRY-847
>                 URL: https://issues.apache.org/jira/browse/SENTRY-847
>             Project: Sentry
>          Issue Type: Bug
>    Affects Versions: 1.5.1
>            Reporter: Anne Yu
>            Assignee: guoquan
>             Fix For: 1.6.0
>
>         Attachments: SENTRY-847.001.patch, SENTRY-847.002.patch, 
> SENTRY-847.003.patch, SENTRY-847.004.patch
>
>
> {code}
> grant select(s) on table test_tb to role test_role;
> show columns in test_tb;
> Error: Error while compiling statement: FAILED: SemanticException No valid 
> privileges
>  Required privileges for this query: 
> Server=server1->Db=test_db->Table=test_tb->action=insert;Server=server1->Db=test_db->Table=test_tb->action=select;
>  (state=42000,code=40000)
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)