[ https://issues.apache.org/jira/browse/IMPALA-6718?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16819460#comment-16819460 ]
ASF subversion and git services commented on IMPALA-6718: --------------------------------------------------------- Commit 53798b0454332df44efce0032a88ef49e770a095 in impala's branch refs/heads/master from Fredy Wijaya [ https://gitbox.apache.org/repos/asf?p=impala.git;h=53798b0 ] IMPALA-6718: Add support for column-level permissions on views This patch adds support for column-level permissions on views. This behavior is compatible with Hive column-level permissons on views. The following statements are now supported. GRANT select(col) ON db.my_view TO ROLE my_role -- Sentry only REVOKE select(col) ON db.my_view FROM ROLE my_role -- Sentry only GRANT select(col) ON db.my_view TO USER my_user -- Ranger only REVOKE select(col) ON db.my_view FROM USER my_user -- Ranger only GRANT select(col) ON db.my_view TO GROUP my_group -- Ranger only REVOKE select(col) ON db.my_view FROM GROUP my_group -- Ranger only Testing: - Updated AuthorizationStmtTest to with new test cases - Ran all FE tests - Ran all E2E authorization tests Change-Id: If81e683212cba22cc0fa5fc091ec3c799fa33e14 Reviewed-on: http://gerrit.cloudera.org:8080/12959 Reviewed-by: Impala Public Jenkins <impala-public-jenk...@cloudera.com> Tested-by: Impala Public Jenkins <impala-public-jenk...@cloudera.com> > Add support column-level permissions on views > --------------------------------------------- > > Key: IMPALA-6718 > URL: https://issues.apache.org/jira/browse/IMPALA-6718 > Project: IMPALA > Issue Type: Sub-task > Components: Frontend > Affects Versions: Impala 2.11.0 > Reporter: Adam Holley > Assignee: Fredy Wijaya > Priority: Critical > Labels: security, usability > Fix For: Impala 3.3.0 > > > Column-level permissions on views are not supported: > https://github.com/apache/impala/blob/da153104f26ef94f1b4db323f5629d678c55f9ee/fe/src/main/java/org/apache/impala/analysis/PrivilegeSpec.java#L248-L251 > This means "GRANT SELECT(COLUMN) on <view>" will throw an exception. Impala > needs to be updated to support column-level permissions on views. -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org For additional commands, e-mail: issues-all-h...@impala.apache.org