----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/41662/#review112476 -----------------------------------------------------------
sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/hive/HiveAuthzBindingHook.java (line 272) <https://reviews.apache.org/r/41662/#comment172924> Why not use currOutTab here, so logic in line 518 can be used and no extra logic need to be introduced in line 592? sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hive/TestPrivilegesAtTableScope.java (line 529) <https://reviews.apache.org/r/41662/#comment172926> Change it to "verify all privileges on tab" to be more clear? Same as the following comments. sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hive/TestPrivilegesAtTableScope.java (line 630) <https://reviews.apache.org/r/41662/#comment172925> Make it another line after if statement. - Hao Hao On Dec. 22, 2015, 9:47 p.m., Li Li wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/41662/ > ----------------------------------------------------------- > > (Updated Dec. 22, 2015, 9:47 p.m.) > > > Review request for sentry, Anne Yu, Hao Hao, Lenni Kuff, and Sravya > Tirukkovalur. > > > Repository: sentry > > > Description > ------- > > The SemanticException happened in HiveAuthzBinding.authorize method, which is > caused by the empty outputHierarchy list. As there is no partition in the > test tbl, the writeEntity set returned from Hive is empty. That's why the > outputHierarchy list is also empty. To resolve it, we should manually add > db.tbl in the outputHierarchy which will be validated in the > hiveAuthzBinding.authorize method. > > > Diffs > ----- > > > sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/hive/HiveAuthzBindingHook.java > 994af8a04414f5093a0d5546744d6da727b69db4 > > sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hive/TestPrivilegesAtTableScope.java > 56776db7c463e1f27cd39baa9e4c9d9709c53925 > > Diff: https://reviews.apache.org/r/41662/diff/ > > > Testing > ------- > > add test case for: > empty partitioned table and NOT empty partitioned table > user with permission and user WITHOUT permission > > > Thanks, > > Li Li > >
