[jira] [Commented] (SENTRY-848) [column level privilege] if grant user column level select privilege, DESCRIBE FORMATTED table[.column] shouldn't require extra table level privilege

[Hadoop QA (JIRA)]

    [ 
https://issues.apache.org/jira/browse/SENTRY-848?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15333898#comment-15333898
 ] 

Hadoop QA commented on SENTRY-848:
----------------------------------

Here are the results of testing the latest attachment
https://issues.apache.org/jira/secure/attachment/12811083/SENTRY-848-003.patch 
against master.

{color:green}Overall:{color} +1 all checks pass

{color:green}SUCCESS:{color} all tests passed

Console output: 
https://builds.apache.org/job/PreCommit-SENTRY-Build/1711/console

This message is automatically generated.

> [column level privilege] if grant user column level select privilege, 
> DESCRIBE FORMATTED table[.column] shouldn't require extra table level 
> privilege
> -----------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: SENTRY-848
>                 URL: https://issues.apache.org/jira/browse/SENTRY-848
>             Project: Sentry
>          Issue Type: Bug
>    Affects Versions: 1.5.1
>            Reporter: Anne Yu
>            Assignee: Ke Jia
>         Attachments: SENTRY-848-001.patch, SENTRY-848-002.patch, 
> SENTRY-848-002.patch, SENTRY-848-003.patch
>
>
> {code}
> create table test_tb(s string, i int);
> grant select(s) on table test_tb to role test_role;
> grant role test_role to group test_user;
> {code}
> use test_user to login,
> {code}
> describe formatted test_tb s;
> Error: Error while compiling statement: FAILED: SemanticException No valid 
> privileges
>  Required privileges for this query: 
> Server=server1->Db=test_db->Table=test_tb->action=insert;Server=server1->Db=test_db->Table=test_tb->action=select;
>  (state=42000,code=40000)
> {code}
> How about describe [formatted] test_tb; do we allow test_user to list his 
> permitted columns? for example,
> +-----------+------------+----------+--+
> | col_name  | data_type  | comment  |
> +-----------+------------+----------+--+
> | s         | string     |          |
> +-----------+------------+----------+--+
> 2 rows selected (0.167 seconds)
> However "ANALYZE TABLE test_tb COMPUTE STATISTICS FOR COLUMNS s" is allowed 
> for test_user.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)