[ 
https://issues.apache.org/jira/browse/KYLIN-2720?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16095849#comment-16095849
 ] 

Shaofeng SHI commented on KYLIN-2720:
-------------------------------------

The new patch passes the UT, thanks;
https://github.com/apache/kylin/commit/84ba5615898de99e154d0e13912a82815a0cf02f

As Kylin 2.1 has been staged for release, I would mark this as fiexed in next 
release.

> Should not allow user to access to all tables' metadata of a project
> --------------------------------------------------------------------
>
>                 Key: KYLIN-2720
>                 URL: https://issues.apache.org/jira/browse/KYLIN-2720
>             Project: Kylin
>          Issue Type: Improvement
>            Reporter: qiumingming
>            Assignee: qiumingming
>             Fix For: v2.0.0, v2.1.0
>
>         Attachments: KYLIN-2720.patch
>
>
> Currently, user can access to all tables and columns metadata of a specific 
> project as long as he can access to this project, which is not reasonable. 
> User should just allow to access to tables that he owned cubes dependent to. 
> However, user can see some other tables in the web UI in current version.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to