suja s created RANGER-4713: ------------------------------ Summary: Alter view needs additional select permission on db which is not required for create view Key: RANGER-4713 URL: https://issues.apache.org/jira/browse/RANGER-4713 Project: Ranger Issue Type: Bug Components: Ranger Reporter: suja s
STEPS TO REPRODUCE: Create db dbfortest Create table tablefortest under dbfortest (create table dbfortest.tablefortest(id int, name1 string, name2 string)) Insert rows into dbfortest.tablefortest User u1 has select access on tablefortest via ranger policy[db=dbfortest, table=tablefortest, column=*] - policy P1 User u1 has create and alter permissions via ranger policy [db=dbfortest, table=viewfortest, column=*] - policy P2 Connect to beeline as user u1 and execute command 'create view dbfortest.viewfortest as select id,name1 from dbfortest.tablefortest' View creation is successful, Ranger access audits show that policy P1 granted select on tablefortest and policy P2 granted create on viewfortest Execute command 'alter view dbfortest.viewfortest as select id,name2 from dbfortest.tablefortest'. CURRENT BEHAVIOUR: Alter view command fails with access denied error for user not having select permissions on database dbfortest -- This message was sent by Atlassian Jira (v8.20.10#820010)