[ 
https://issues.apache.org/jira/browse/SENTRY-962?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15032870#comment-15032870
 ] 

Dapeng Sun edited comment on SENTRY-962 at 12/1/15 1:45 AM:
------------------------------------------------------------

Thank [~lskuff] for your review, I have enriched the description 
{noformat}
"some" is a reserved word of Sentry privilege, it means any privileges at the 
specified privilege scope(level).
So when getPrivileges are requesting a column level privilege with "some", we 
shouldn't return the privileges which column level is "+" or "some" at 
SentryStore, the correct privileges should be all privileges are upper layer of 
column.
{noformat}


was (Author: dapengsun):
Thank [~lskuff] for your review, I have enriched the description 
{noformat}
"some" is a reserved word of Sentry privilege, it means any privileges at the 
specified privilege scope(level).
So when getPrivileges are requesting a column level privilege with "some", we 
shouldn't return the privileges which column level is "+" or "some" at 
SentryStore, the correct privileges should be all privileges are upper layer 
privileges of column.
{noformat}

> Fix SentryStore getPrivileges when column require "some"
> --------------------------------------------------------
>
>                 Key: SENTRY-962
>                 URL: https://issues.apache.org/jira/browse/SENTRY-962
>             Project: Sentry
>          Issue Type: Bug
>            Reporter: Dapeng Sun
>            Assignee: Dapeng Sun
>         Attachments: SENTRY-962.001.patch
>
>
> "some" is a reserved word of Sentry privilege, it means any privileges at the 
> specified privilege scope(level).
> So when getPrivileges are requesting a column level privilege with "some", we 
> shouldn't return the privileges which column level is "+" or "some" at 
> SentryStore, the correct privileges should be all privileges are upper layer 
> of column.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to