[
https://issues.apache.org/jira/browse/IMPALA-7275?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16801190#comment-16801190
]
ASF subversion and git services commented on IMPALA-7275:
---------------------------------------------------------
Commit f3c1d2c0a2f64b869ac7bc3fddc4c3705fe6d67a in impala's branch
refs/heads/2.x from Adam Holley
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=f3c1d2c ]
IMPALA-7275: Create table authorization error should not show table name
The authorization correctly checks database level authorization but
the exception includes the table name. This fix adds a check for
create and modifies the error string to remove the table name. Having
an error with CREATE on a table is not correct since to create a table
a user needs CREATE on the parent database.
Example:
SQL: CREATE TABLE db.tbl(col1 INT)
Before:
User 'user1' does not have privileges to execute 'CREATE' on: db.tbl
After:
User 'user1' does not have privileges to execute 'CREATE' on: db
Testsing: Ran all FE tests
Change-Id: I6711a744541abd5ff26574974ba8517b6e51c453
Reviewed-on: http://gerrit.cloudera.org:8080/10919
Reviewed-by: Fredy Wijaya <[email protected]>
Tested-by: Impala Public Jenkins <[email protected]>
> Create table with insufficient privileges should not show table
> ---------------------------------------------------------------
>
> Key: IMPALA-7275
> URL: https://issues.apache.org/jira/browse/IMPALA-7275
> Project: IMPALA
> Issue Type: Bug
> Components: Frontend
> Affects Versions: Impala 3.0
> Reporter: Adam Holley
> Assignee: Adam Holley
> Priority: Major
> Labels: security
> Fix For: Impala 3.1.0
>
>
> {noformat}
> [localhost:21000] default> create table db1.tbl1;
> Query: create table db1.tbl
> ERROR: AuthorizationException: User 'user1' does not have privileges to
> execute 'CREATE' on: db1.tbl1
> {noformat}
> The error message should be:
> ERROR: AuthorizationException: User 'user1' does not have privileges to
> execute 'CREATE' on: db1
> Note that it is not permitted to have CREATE granted to a table.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
