-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/72061/
-----------------------------------------------------------
(Updated 四月 23, 2020, 3:21 a.m.)
Review request for ranger, Don Bosco Durai, Colm O hEigeartaigh, Abhay
Kulkarni, Madhan Neethiraj, Mehul Parikh, Nitin Galave, pengjianhua, Pradeep
Agrawal, Ramesh Mani, Selvamohan Neethiraj, Velmurugan Periasamy, and Zsombor
Gegesy.
Bugs: RANGER-2716
https://issues.apache.org/jira/browse/RANGER-2716
Repository: ranger
Description
-------
Presto plugin returns the input set of catalogs/schemas/tables directly at
present. However, this causes a problem, that is, when the user uses show
catalogs/schemas/tables, all catalogs/schemas/tables are displayed, even though
the user does not have the permissions to display all catalogs/schemas/tables.
We need to fix the filterCatalogs/Schemas/Tables functions to filter
catalogs/schemas/tables, so that the user can only see the
catalogs/schemas/tables in which the user has SELECT permission.
Diffs
-----
plugin-presto/src/main/java/org/apache/ranger/authorization/presto/authorizer/RangerSystemAccessControl.java
3ab63f590
ranger-presto-plugin-shim/src/main/java/org/apache/ranger/authorization/presto/authorizer/RangerSystemAccessControl.java
e89f646e1
Diff: https://reviews.apache.org/r/72061/diff/1/
Testing
-------
show catalogs/schemas/tables only display the catalogs/schemas/tables in which
the user has SELECT permission.
File Attachments (updated)
----------------
0002-RANGER-2716.patch
https://reviews.apache.org/media/uploaded/files/2020/04/23/c8100704-4d07-4193-b8ae-9ba40f7d42d2__0002-RANGER-2716.patch
Thanks,
Jiayi Liu
