hive-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Yongzhi Chen (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HIVE-15735) In some cases, view objects inside a view do not have parents
Date Thu, 26 Jan 2017 19:01:24 GMT
Yongzhi Chen created HIVE-15735:
-----------------------------------

             Summary: In some cases, view objects inside a view do not have parents
                 Key: HIVE-15735
                 URL: https://issues.apache.org/jira/browse/HIVE-15735
             Project: Hive
          Issue Type: Bug
            Reporter: Yongzhi Chen
            Assignee: Yongzhi Chen


This cause Sentry throws "No valid privileges" error:
Error: Error while compiling statement: FAILED: SemanticException No valid privileges.
To reproduce:
Enable sentry:
create table t1( i int);
create view v1 as select * from t1;
create view v2 as select * from v1 union all select * from v1;
If the user does not have read permission on t1 and v1, the query
select * from v2;  
This will fail with:
Error: Error while compiling statement: FAILED: SemanticException No valid privileges
 User foo does not have privileges for QUERY
 The required privileges: Server=server1->Db=database2->Table=v1->action=select;
(state=42000,code=40000)
Sentry should not check v1's permission, for v1 has at least one parent(v2).




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message