[
https://issues.apache.org/jira/browse/RANGER-1823?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Haihui Xu updated RANGER-1823:
------------------------------
Description: In beeline, useraa create table hive_test, such as : CREATE
TABLE hive_test(b string) PARTITIONED BY (a string); then in ranger admin UI
add a policy for userbb, the policy has only "SELECT" of table hive_test; in
beeline userbb execute "truncate table hive_test" / "insert into hive_test
partition(a=20171003) select 1 from hive_test" is allowed. (was: In beeline,
useraa create table hive_test, such as : CREATE TABLE hive_test(b string)
PARTITIONED BY (a string); then in ranger admin UI add a policy for userbb,
the policy has only "SELECT" of table hive_test; in beeline userbb execute
"truncate table hive_test" / )
> Allowed TRUNCATE/INSERT to partition table when the policy item is only
> "SELECT"
> --------------------------------------------------------------------------------
>
> Key: RANGER-1823
> URL: https://issues.apache.org/jira/browse/RANGER-1823
> Project: Ranger
> Issue Type: Bug
> Components: plugins
> Affects Versions: 0.5.3
> Reporter: Haihui Xu
> Assignee: Haihui Xu
> Fix For: 0.5.4, 1.0.0
>
>
> In beeline, useraa create table hive_test, such as : CREATE TABLE
> hive_test(b string) PARTITIONED BY (a string); then in ranger admin UI add
> a policy for userbb, the policy has only "SELECT" of table hive_test; in
> beeline userbb execute "truncate table hive_test" / "insert into hive_test
> partition(a=20171003) select 1 from hive_test" is allowed.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
