[ https://issues.apache.org/jira/browse/SENTRY-962?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15032870#comment-15032870 ]
Dapeng Sun edited comment on SENTRY-962 at 12/1/15 1:45 AM: ------------------------------------------------------------ Thank [~lskuff] for your review, I have enriched the description {noformat} "some" is a reserved word of Sentry privilege, it means any privileges at the specified privilege scope(level). So when getPrivileges are requesting a column level privilege with "some", we shouldn't return the privileges which column level is "+" or "some" at SentryStore, the correct privileges should be all privileges are upper layer of column. {noformat} was (Author: dapengsun): Thank [~lskuff] for your review, I have enriched the description {noformat} "some" is a reserved word of Sentry privilege, it means any privileges at the specified privilege scope(level). So when getPrivileges are requesting a column level privilege with "some", we shouldn't return the privileges which column level is "+" or "some" at SentryStore, the correct privileges should be all privileges are upper layer privileges of column. {noformat} > Fix SentryStore getPrivileges when column require "some" > -------------------------------------------------------- > > Key: SENTRY-962 > URL: https://issues.apache.org/jira/browse/SENTRY-962 > Project: Sentry > Issue Type: Bug > Reporter: Dapeng Sun > Assignee: Dapeng Sun > Attachments: SENTRY-962.001.patch > > > "some" is a reserved word of Sentry privilege, it means any privileges at the > specified privilege scope(level). > So when getPrivileges are requesting a column level privilege with "some", we > shouldn't return the privileges which column level is "+" or "some" at > SentryStore, the correct privileges should be all privileges are upper layer > of column. -- This message was sent by Atlassian JIRA (v6.3.4#6332)