[ 
https://issues.apache.org/jira/browse/KYLIN-2720?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16148686#comment-16148686
 ] 

qiumingming commented on KYLIN-2720:
------------------------------------

Okay, I see. But I'm also confused. Is that means I will not see any some other 
tables in the web UI that I owned cubes do not dependent to. I have not 
upgraded to kylin 2.1, so I want to know it. As you can see, my patch did 
nothing about ACL grant or revoke, it just control tables that being displayed 
in the web UI. So user will not see tables he can not query to in the web UI. 
Otherwise, user will be confused : why display tables that I can not query?

> Should not allow user to access to all tables' metadata of a project
> --------------------------------------------------------------------
>
>                 Key: KYLIN-2720
>                 URL: https://issues.apache.org/jira/browse/KYLIN-2720
>             Project: Kylin
>          Issue Type: Improvement
>            Reporter: qiumingming
>            Assignee: qiumingming
>         Attachments: KYLIN-2720.patch
>
>
> Currently, user can access to all tables and columns metadata of a specific 
> project as long as he can access to this project, which is not reasonable. 
> User should just allow to access to tables that he owned cubes dependent to. 
> However, user can see some other tables in the web UI in current version.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to