[
https://issues.apache.org/jira/browse/KYLIN-2720?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16095849#comment-16095849
]
Shaofeng SHI commented on KYLIN-2720:
-------------------------------------
The new patch passes the UT, thanks;
https://github.com/apache/kylin/commit/84ba5615898de99e154d0e13912a82815a0cf02f
As Kylin 2.1 has been staged for release, I would mark this as fiexed in next
release.
> Should not allow user to access to all tables' metadata of a project
> --------------------------------------------------------------------
>
> Key: KYLIN-2720
> URL: https://issues.apache.org/jira/browse/KYLIN-2720
> Project: Kylin
> Issue Type: Improvement
> Reporter: qiumingming
> Assignee: qiumingming
> Fix For: v2.0.0, v2.1.0
>
> Attachments: KYLIN-2720.patch
>
>
> Currently, user can access to all tables and columns metadata of a specific
> project as long as he can access to this project, which is not reasonable.
> User should just allow to access to tables that he owned cubes dependent to.
> However, user can see some other tables in the web UI in current version.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
