[ 
https://issues.apache.org/jira/browse/IMPALA-6881?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Fredy Wijaya updated IMPALA-6881:
---------------------------------
    Description: COMPUTE STATS execute SELECT child queries. However in the 
COMPUTE STATS analysis phase, we only register for ALTER privilege. In other 
words, having only ALTER privilege on the target will pass the COMPUTE STATS 
analysis phase, but will fail later in the child queries due to insufficient 
SELECT privilege on the target table. It will be good to fail early at COMPUTE 
STATS analysis phase by registering both ALTER and SELECT privileges in the 
COMPUTE STATS analysis phase.

> COMPUTE STATS should check for SELECT privilege at analysis
> -----------------------------------------------------------
>
>                 Key: IMPALA-6881
>                 URL: https://issues.apache.org/jira/browse/IMPALA-6881
>             Project: IMPALA
>          Issue Type: Bug
>          Components: Frontend
>    Affects Versions: Impala 2.9.0, Impala 2.10.0, Impala 2.11.0
>            Reporter: Fredy Wijaya
>            Assignee: Fredy Wijaya
>            Priority: Major
>              Labels: security
>
> COMPUTE STATS execute SELECT child queries. However in the COMPUTE STATS 
> analysis phase, we only register for ALTER privilege. In other words, having 
> only ALTER privilege on the target will pass the COMPUTE STATS analysis 
> phase, but will fail later in the child queries due to insufficient SELECT 
> privilege on the target table. It will be good to fail early at COMPUTE STATS 
> analysis phase by registering both ALTER and SELECT privileges in the COMPUTE 
> STATS analysis phase.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org
For additional commands, e-mail: issues-all-h...@impala.apache.org

Reply via email to