[ 
https://issues.apache.org/jira/browse/DRILL-3467?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14735764#comment-14735764
 ] 

Parth Chandra commented on DRILL-3467:
--------------------------------------

In WorkspaceSchemaFactory(139), if the operation is not supported and 
impersonation is enabled, doesn't it make more sense to return false and fail 
the query? 
Also the exception may not be getting logged in the logger message.

+1 otherwise.

> Restrict 'show databases' based on underlying permissions.
> ----------------------------------------------------------
>
>                 Key: DRILL-3467
>                 URL: https://issues.apache.org/jira/browse/DRILL-3467
>             Project: Apache Drill
>          Issue Type: Improvement
>          Components: Metadata
>            Reporter: Andy Pernsteiner
>            Assignee: Venki Korukanti
>         Attachments: DRILL-3467-1.patch
>
>
> Ideally, an administrator would have the ability to restrict the visibility 
> of workspaces based on the FS permissions that underly those workspaces. 
> Currently it appears we only honor this for 'show tables' , but not for 'show 
> databases'.
> Without this functionality (or something that gives an equivalent result), 
> users will be able to see any and all workspaces, including ones which 
> administrators may wish to keep 'invisible'. Additionally, when having 
> hundreds (or potentially thousands) of users, seeing all workspaces via 'show 
> databases' is likely to make it difficult for end-users to know what they can 
> and cannot access.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to