How does Sentry authorize SQL Insert

[An Qin]

Hi,

 

I developed a system with Sentry to authorize SQL users. When I execute
an insert SQL (insert into ...), I notice that it fires 3
PreReadTableEvents, and then a PreAlterTableEvent to
MetastoreAuthzBinding. Why is there a PreAlterTableEvent for this SQL?
The user has no permission to insert this table, so it throws a
MetaException for this event. This exception is sent to client side.
However, the data *is* inserted! How to response these pre events? Is it
a bug?

 

Thank you!

 

 

Qin An.