Madhan Neethiraj created RANGER-4723:
----------------------------------------

             Summary: USE <database> fails even when the user has permission on 
some tables in the database
                 Key: RANGER-4723
                 URL: https://issues.apache.org/jira/browse/RANGER-4723
             Project: Ranger
          Issue Type: Bug
          Components: plugins
            Reporter: Madhan Neethiraj
            Assignee: Madhan Neethiraj


Consider the following scenario:
 # a resource-based policy allows user {{user1}} {{select}} access to all 
tables in database {{db1}}
 # tables with name starting with "{{{}test{}}}" in database {{db1}} are added 
to security-zone {{test_zone}}

Note that {{user1}} doesn't have any access to tables in zone 
{{{}test_zone{}}}. However, the user has access to all other tables in database 
db1 via policy created in #1 above. So, {{USE db1;}} command should be allowed 
for the user. However, the user is denied.

 
{noformat}
> use db1;
Error: Error while compiling statement: FAILED: HiveAccessControlException 
Permission denied: user [user1] does not have [USE] privilege on [db1] 
(state=42000,code=40000) {noformat}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to