[
https://issues.apache.org/jira/browse/HAWQ-1375?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Hubert Zhang closed HAWQ-1375.
------------------------------
Resolution: Invalid
Fix Version/s: 2.2.0.0-incubating
> Ranger should always using the current user to do privilege check.
> ------------------------------------------------------------------
>
> Key: HAWQ-1375
> URL: https://issues.apache.org/jira/browse/HAWQ-1375
> Project: Apache HAWQ
> Issue Type: Bug
> Reporter: Hubert Zhang
> Assignee: Ed Espino
> Fix For: 2.2.0.0-incubating
>
>
> Failure Case:
> {code}
> user u1 create table a(i int);
> user u2 create view av as select * from a;
> user u3 select * from av.
> {code}
> When ORCA is on, u3 will first ask select privilege as user u3 to Ranger, and
> then ask select privilege as user u2 to Ranger.
> The second check should be removed, since there may be no privilege for u2 to
> select av even if av is created by u2 in Ranger mode.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
