> On July 12, 2018, 2:53 p.m., Arjun Mishra wrote: > > sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/hive/authz/DefaultSentryAccessController.java > > Line 550 (original), 558 (patched) > > <https://reviews.apache.org/r/67888/diff/1/?file=2058565#file2058565line558> > > > > Can we also modify the COLUMN to throw an exception if anything by > > SELECT is granted on it?
This is not supported. Sentry gets the columns in a different way. It is on the comment: case FUNCTION: case PARTITION: case COLUMN: case COMMAND_PARAMS: // not support these type throw new HiveAuthzPluginException(hivePrivObject.getType().name() + " are not supported in sentry"); - Sergio ----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/67888/#review206010 ----------------------------------------------------------- On July 11, 2018, 8:33 p.m., Sergio Pena wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/67888/ > ----------------------------------------------------------- > > (Updated July 11, 2018, 8:33 p.m.) > > > Review request for sentry and Arjun Mishra. > > > Bugs: sentry-2308 > https://issues.apache.org/jira/browse/sentry-2308 > > > Repository: sentry > > > Description > ------- > > Do not allow CREATE privileges on a table. There is no use case for it. > > > Diffs > ----- > > > sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/hive/SentryHiveAuthorizationTaskFactoryImpl.java > 2c662e55382adc36abd18b6b6b82aa7a0b2f210b > > sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/hive/authz/DefaultSentryAccessController.java > beca2f8f3fd03953d5652337dee7e69313f098a3 > > > Diff: https://reviews.apache.org/r/67888/diff/1/ > > > Testing > ------- > > > Thanks, > > Sergio Pena > >