hereisharish opened a new pull request #112:
URL: https://github.com/apache/ranger/pull/112


   
   Create view db1.view1 as select * from db2.table1 -> this query has two 
checks 
   check 1 - create view permission on db1 
   check 2 - select table columns permission on db2.table1
   
   check 1 is done with method checkCanCreateView - all good here
   check 2 to be done with checkCanCreateViewWithSelectFromColumns has 
db2.table1 info in CatalogSchemaTableName
   
   current checkCanCreateView inside checkCanCreateViewWithSelectFromColumns 
method does the check on create view permissions on db2 which is neither check 
1 nor 2.
   Replacing checkCanCreateView with checkCanSelectFromColumns inside 
checkCanCreateViewWithSelectFromColumns will do the check 2


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to