Return-Path: X-Original-To: apmail-sentry-commits-archive@minotaur.apache.org Delivered-To: apmail-sentry-commits-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 7776711E81 for ; Tue, 9 Sep 2014 10:30:50 +0000 (UTC) Received: (qmail 79370 invoked by uid 500); 9 Sep 2014 10:30:50 -0000 Delivered-To: apmail-sentry-commits-archive@sentry.apache.org Received: (qmail 79323 invoked by uid 500); 9 Sep 2014 10:30:50 -0000 Mailing-List: contact commits-help@sentry.incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@sentry.incubator.apache.org Delivered-To: mailing list commits@sentry.incubator.apache.org Received: (qmail 79314 invoked by uid 99); 9 Sep 2014 10:30:50 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 09 Sep 2014 10:30:50 +0000 X-ASF-Spam-Status: No, hits=-2001.7 required=5.0 tests=ALL_TRUSTED,RP_MATCHES_RCVD X-Spam-Check-By: apache.org Received: from [140.211.11.3] (HELO mail.apache.org) (140.211.11.3) by apache.org (qpsmtpd/0.29) with SMTP; Tue, 09 Sep 2014 10:30:49 +0000 Received: (qmail 79280 invoked by uid 99); 9 Sep 2014 10:30:28 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 09 Sep 2014 10:30:28 +0000 Date: Tue, 9 Sep 2014 10:30:28 +0000 (UTC) From: "Dapeng Sun (JIRA)" To: commits@sentry.incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (SENTRY-74) Add column-level privileges for Hive/Impala MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/SENTRY-74?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Dapeng Sun updated SENTRY-74: ----------------------------- Attachment: (was: SENTRY-74.003.patch) > Add column-level privileges for Hive/Impala > ------------------------------------------- > > Key: SENTRY-74 > URL: https://issues.apache.org/jira/browse/SENTRY-74 > Project: Sentry > Issue Type: Improvement > Affects Versions: 1.3.0 > Reporter: Jeremy Beard > Assignee: Dapeng Sun > Fix For: 1.5.0 > > Attachments: Design Document of Column-Level Access Control_v1.pdf, SENTRY-74.2.patch, SENTRY-74.patch > > > Currently the finest grain of privilege is at the table/view level. This leads to the unwieldy scenario where a different view has to be created for each combination of columns that need to be restricted. With column level privileges this would not be required. > In the policy file column privileges might potentially look like: > server=server1->db=default->table=employees->column=salary->action=select -- This message was sent by Atlassian JIRA (v6.3.4#6332)