[ 
https://issues.apache.org/jira/browse/KYLIN-2720?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16095750#comment-16095750
 ] 

qiumingming commented on KYLIN-2720:
------------------------------------

I see. There is a mistake in the patch: @Qualifier("cubeService") should be 
@Qualifier("cubeMgmtService"). I run well in kylin 1.5. But there are some code 
differences between master-branch and 1.5. I am sorry for this. A new version 
patch has been attached.

> Should not allow user to access to all tables' metadata of a project
> --------------------------------------------------------------------
>
>                 Key: KYLIN-2720
>                 URL: https://issues.apache.org/jira/browse/KYLIN-2720
>             Project: Kylin
>          Issue Type: Improvement
>            Reporter: qiumingming
>            Assignee: qiumingming
>             Fix For: v2.0.0, v2.1.0
>
>         Attachments: KYLIN-2720.patch
>
>
> Currently, user can access to all tables and columns metadata of a specific 
> project as long as he can access to this project, which is not reasonable. 
> User should just allow to access to tables that he owned cubes dependent to. 
> However, user can see some other tables in the web UI in current version.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to