[ https://issues.apache.org/jira/browse/RANGER-2664?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16990323#comment-16990323 ]
star edited comment on RANGER-2664 at 12/7/19 5:01 AM: ------------------------------------------------------- {code:java} Regarding the redundant code, We do it so we get audit for the "SHOW DATABASE" command.{code} Got it. Thanks. Better to backport it if ranger 1.2 is still in support. was (Author: starphin): {code:java} Regarding the redundant code, We do it so we get audit for the "SHOW DATABASE" command.{code} > filterListCmdObjects does not work in sql 'show databases' > ---------------------------------------------------------- > > Key: RANGER-2664 > URL: https://issues.apache.org/jira/browse/RANGER-2664 > Project: Ranger > Issue Type: Bug > Components: plugins > Affects Versions: 1.2.0 > Reporter: star > Priority: Major > Attachments: Ranger-2664-1.2-PermissionDenied.patch, > Ranger-2664-1.2.patch, ranger-2664.patch > > > In hive plugin, when execute sql 'show databases', > privilege HiveAccessType.USE is required on database '*'. If it is > authorized USE privilege, all database will be showed. If not, the sql will > be stuck when checking privilege. > To solve the problem, just let the sql 'show databases' pass through when > METASTORE_FILTER_HOOK is set as AuthorizationMetaStoreFilterHook. Privilege > HiveAccessType.USE is not required on database '*'. -- This message was sent by Atlassian Jira (v8.3.4#803005)