[ 
https://issues.apache.org/jira/browse/IMPALA-7059?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Fredy Wijaya updated IMPALA-7059:
---------------------------------
    Description: 
{noformat}
[localhost:21000] default> grant insert on database functional to role 
foo_role;                                                                       
                                                                                
      
Query: grant insert on database functional to role foo_role
Query submitted at: 2018-07-11 11:05:51 (Coordinator: 
http://fwijaya-impala-dev3.vpc.cloudera.com:25000)
Query progress can be monitored at: 
http://fwijaya-impala-dev3.vpc.cloudera.com:25000/query_plan?query_id=4a45c33de497d745:8242abc400000000
+---------------------------------+
| summary                         |
+---------------------------------+
| Privilege(s) have been granted. |
+---------------------------------+
Fetched 1 row(s) in 0.13s
[localhost:21000] default> describe functional.alltypes;
Query: describe functional.alltypes
Fetched 0 row(s) in 5.45s

[localhost:21000] default> describe database functional;
Query: describe database functional
+------------+-----------------------------------------------------+---------+
| name       | location                                            | comment |
+------------+-----------------------------------------------------+---------+
| functional | hdfs://localhost:20500/test-warehouse/functional.db |         |
+------------+-----------------------------------------------------+---------+
{noformat}
For consistency with privileges on other metadata SQL statements, such as 
DESCRIBE DATABASE, we should register VIEW_METADATA privilege instead of just 
SELECT.

  was:
{noformat}
[localhost:21000] default> grant insert on server to role foo_role;
[localhost:21000] default> describe functional.alltypes;
Query: describe functional.alltypes
Fetched 0 row(s) in 0.01s
{noformat}
For consistency with privileges on other metadata SQL statements, we should 
register VIEW_METADATA privilege instead of just SELECT.


> Inconsistent privilege model between DESCRIBE and DESCRIBE DATABASE
> -------------------------------------------------------------------
>
>                 Key: IMPALA-7059
>                 URL: https://issues.apache.org/jira/browse/IMPALA-7059
>             Project: IMPALA
>          Issue Type: Bug
>          Components: Frontend
>    Affects Versions: Impala 3.0
>            Reporter: Fredy Wijaya
>            Assignee: Fredy Wijaya
>            Priority: Major
>              Labels: security
>
> {noformat}
> [localhost:21000] default> grant insert on database functional to role 
> foo_role;                                                                     
>                                                                               
>           
> Query: grant insert on database functional to role foo_role
> Query submitted at: 2018-07-11 11:05:51 (Coordinator: 
> http://fwijaya-impala-dev3.vpc.cloudera.com:25000)
> Query progress can be monitored at: 
> http://fwijaya-impala-dev3.vpc.cloudera.com:25000/query_plan?query_id=4a45c33de497d745:8242abc400000000
> +---------------------------------+
> | summary                         |
> +---------------------------------+
> | Privilege(s) have been granted. |
> +---------------------------------+
> Fetched 1 row(s) in 0.13s
> [localhost:21000] default> describe functional.alltypes;
> Query: describe functional.alltypes
> Fetched 0 row(s) in 5.45s
> [localhost:21000] default> describe database functional;
> Query: describe database functional
> +------------+-----------------------------------------------------+---------+
> | name       | location                                            | comment |
> +------------+-----------------------------------------------------+---------+
> | functional | hdfs://localhost:20500/test-warehouse/functional.db |         |
> +------------+-----------------------------------------------------+---------+
> {noformat}
> For consistency with privileges on other metadata SQL statements, such as 
> DESCRIBE DATABASE, we should register VIEW_METADATA privilege instead of just 
> SELECT.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org
For additional commands, e-mail: issues-all-h...@impala.apache.org

Reply via email to