[jira] [Updated] (IMPALA-7059) Inconsistent privilege model between DESCRIBE and DESCRIBE DATABASE

2019-06-13 Thread Quanlong Huang (JIRA) 


 [ 
https://issues.apache.org/jira/browse/IMPALA-7059?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Quanlong Huang updated IMPALA-7059:
---
Fix Version/s: Impala 2.13.0

> Inconsistent privilege model between DESCRIBE and DESCRIBE DATABASE
> ---
>
> Key: IMPALA-7059
> URL: https://issues.apache.org/jira/browse/IMPALA-7059
> Project: IMPALA
>  Issue Type: Bug
>  Components: Frontend
>Affects Versions: Impala 3.0
>Reporter: Fredy Wijaya
>Assignee: Fredy Wijaya
>Priority: Major
>  Labels: security
> Fix For: Impala 2.13.0, Impala 3.1.0
>
>
> {noformat}
> [localhost:21000] default> grant insert on database functional to role 
> foo_role; 
>   
>   
> Query: grant insert on database functional to role foo_role
> Query submitted at: 2018-07-11 11:05:51 (Coordinator: 
> http://fwijaya-impala-dev3.vpc.cloudera.com:25000)
> Query progress can be monitored at: 
> http://fwijaya-impala-dev3.vpc.cloudera.com:25000/query_plan?query_id=4a45c33de497d745:8242abc4
> +-+
> | summary |
> +-+
> | Privilege(s) have been granted. |
> +-+
> Fetched 1 row(s) in 0.13s
> [localhost:21000] default> describe functional.alltypes;
> Query: describe functional.alltypes
> Fetched 0 row(s) in 5.45s
> [localhost:21000] default> describe database functional;
> Query: describe database functional
> ++-+-+
> | name   | location| comment |
> ++-+-+
> | functional | hdfs://localhost:20500/test-warehouse/functional.db | |
> ++-+-+
> {noformat}
> For consistency with privileges on other metadata SQL statements, such as 
> DESCRIBE DATABASE, we should register VIEW_METADATA privilege instead of just 
> SELECT.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

-
To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org
For additional commands, e-mail: issues-all-h...@impala.apache.org

[jira] [Updated] (IMPALA-7059) Inconsistent privilege model between DESCRIBE and DESCRIBE DATABASE

2018-07-11 Thread Fredy Wijaya (JIRA) 


 [ 
https://issues.apache.org/jira/browse/IMPALA-7059?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Fredy Wijaya updated IMPALA-7059:
-
Description: 
{noformat}
[localhost:21000] default> grant insert on database functional to role 
foo_role;   

  
Query: grant insert on database functional to role foo_role
Query submitted at: 2018-07-11 11:05:51 (Coordinator: 
http://fwijaya-impala-dev3.vpc.cloudera.com:25000)
Query progress can be monitored at: 
http://fwijaya-impala-dev3.vpc.cloudera.com:25000/query_plan?query_id=4a45c33de497d745:8242abc4
+-+
| summary |
+-+
| Privilege(s) have been granted. |
+-+
Fetched 1 row(s) in 0.13s
[localhost:21000] default> describe functional.alltypes;
Query: describe functional.alltypes
Fetched 0 row(s) in 5.45s

[localhost:21000] default> describe database functional;
Query: describe database functional
++-+-+
| name   | location| comment |
++-+-+
| functional | hdfs://localhost:20500/test-warehouse/functional.db | |
++-+-+
{noformat}
For consistency with privileges on other metadata SQL statements, such as 
DESCRIBE DATABASE, we should register VIEW_METADATA privilege instead of just 
SELECT.

  was:
{noformat}
[localhost:21000] default> grant insert on server to role foo_role;
[localhost:21000] default> describe functional.alltypes;
Query: describe functional.alltypes
Fetched 0 row(s) in 0.01s
{noformat}
For consistency with privileges on other metadata SQL statements, we should 
register VIEW_METADATA privilege instead of just SELECT.


> Inconsistent privilege model between DESCRIBE and DESCRIBE DATABASE
> ---
>
> Key: IMPALA-7059
> URL: https://issues.apache.org/jira/browse/IMPALA-7059
> Project: IMPALA
>  Issue Type: Bug
>  Components: Frontend
>Affects Versions: Impala 3.0
>Reporter: Fredy Wijaya
>Assignee: Fredy Wijaya
>Priority: Major
>  Labels: security
>
> {noformat}
> [localhost:21000] default> grant insert on database functional to role 
> foo_role; 
>   
>   
> Query: grant insert on database functional to role foo_role
> Query submitted at: 2018-07-11 11:05:51 (Coordinator: 
> http://fwijaya-impala-dev3.vpc.cloudera.com:25000)
> Query progress can be monitored at: 
> http://fwijaya-impala-dev3.vpc.cloudera.com:25000/query_plan?query_id=4a45c33de497d745:8242abc4
> +-+
> | summary |
> +-+
> | Privilege(s) have been granted. |
> +-+
> Fetched 1 row(s) in 0.13s
> [localhost:21000] default> describe functional.alltypes;
> Query: describe functional.alltypes
> Fetched 0 row(s) in 5.45s
> [localhost:21000] default> describe database functional;
> Query: describe database functional
> ++-+-+
> | name   | location| comment |
> ++-+-+
> | functional | hdfs://localhost:20500/test-warehouse/functional.db | |
> ++-+-+
> {noformat}
> For consistency with privileges on other metadata SQL statements, such as 
> DESCRIBE DATABASE, we should register VIEW_METADATA privilege instead of just 
> SELECT.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

-
To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org
For additional commands, e-mail: issues-all-h...@impala.apache.org

[jira] [Updated] (IMPALA-7059) Inconsistent privilege model between DESCRIBE and DESCRIBE DATABASE

2018-07-11 Thread Fredy Wijaya (JIRA) 


 [ 
https://issues.apache.org/jira/browse/IMPALA-7059?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Fredy Wijaya updated IMPALA-7059:
-
Summary: Inconsistent privilege model between DESCRIBE and DESCRIBE 
DATABASE  (was: DESCRIBE table without ALL or SELECT privilege shows 0 results)

> Inconsistent privilege model between DESCRIBE and DESCRIBE DATABASE
> ---
>
> Key: IMPALA-7059
> URL: https://issues.apache.org/jira/browse/IMPALA-7059
> Project: IMPALA
>  Issue Type: Bug
>  Components: Frontend
>Affects Versions: Impala 3.0
>Reporter: Fredy Wijaya
>Assignee: Fredy Wijaya
>Priority: Major
>  Labels: security
>
> {noformat}
> [localhost:21000] default> grant insert on server to role foo_role;
> [localhost:21000] default> describe functional.alltypes;
> Query: describe functional.alltypes
> Fetched 0 row(s) in 0.01s
> {noformat}
> For consistency with privileges on other metadata SQL statements, we should 
> register VIEW_METADATA privilege instead of just SELECT.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

-
To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org
For additional commands, e-mail: issues-all-h...@impala.apache.org