hawq-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hubert Zhang (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HAWQ-1375) Ranger should always using the current user to do privilege check.
Date Fri, 03 Mar 2017 08:09:45 GMT
Hubert Zhang created HAWQ-1375:
----------------------------------

             Summary: Ranger should always using the current user to do privilege check.
                 Key: HAWQ-1375
                 URL: https://issues.apache.org/jira/browse/HAWQ-1375
             Project: Apache HAWQ
          Issue Type: Bug
            Reporter: Hubert Zhang
            Assignee: Ed Espino


Failure Case:
{code}
user u1 create table a(i int);
user u2 create view av as select * from a;
user u3 select * from av.
{code}
When ORCA is on, u3 will first ask select privilege as user u3 to Ranger, and then ask select
privilege as user u2 to Ranger.
The second check should be removed, since there may be no privilege for u2 to select av even
if av is created by u2 in Ranger mode.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message