Zoltán Borók-Nagy created HIVE-26708:
----------------------------------------
Summary: Column masking + time travel is not working on Iceberg
tables
Key: HIVE-26708
URL: https://issues.apache.org/jira/browse/HIVE-26708
Project: Hive
Issue Type: Bug
Reporter: Zoltán Borók-Nagy
Column masking + time travel is not working on Iceberg tables.
Repro:
{noformat}
create table col_masking (i int) stored by iceberg;
insert into col_masking values (1);
insert into col_masking values (2);
insert into col_masking values (3);
select * from col_masking for system_version as of <snapshot-id>;
{noformat}
The above time-travel query returns results for the given snapshot.
Now add a column masking rule in Ranger (e.g. Nullify column 'i').
Then execute the same time-travel query:
{noformat}
select * from col_masking for system_version as of <snapshot-id>;
Error while compiling statement: FAILED: SemanticException [Error 10004]: line
77:33 Invalid table alias or column reference 'col_masking': (possible column
names are: i)
{noformat}
I think it's fair to say the engine doesn't support time travel + authorization
rules due to security reasons, but the above error message is misleading.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
