[ https://issues.apache.org/jira/browse/HIVE-21227?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Na Li updated HIVE-21227: ------------------------- Description: HIVE-20776 introduces a change that causes regression for view access. Before the change, a user with select access of a view can get all columns of a view with select access of a view that is derived from a partitioned table. With the change, that user cannot access that view. The reason is that * When user accesses columns of a view, Hive needs to get the partitions of the table that the view is derived from. The user name is the user who issues the query to access the view. * The change in HIVE-20776 checks if user has access to a table before getting its partitions. When user only has access of a view, not the access of a table itself, this change denies the user access of the view. The solution is when getting table partitions, do not filter on table at HMS client was: HIVE-20776 introduces a change that causes regression for view access. Before the change, a user with select access of a view can get all columns of a view with select access of a view that is derived from a partitioned table. With the change, that user cannot access that view. The reason is that * When user accesses columns of a view, Hive needs to get the partitions of the table that the view is derived from. The user name is the user who issues the query to access the view. * The change in HIVE-20776 checks if user has access to a table before getting its partitions. When user only has access of a view, not the access of a table itself, this change denies the user access of the view. > HIVE-20776 causes view access regression > ---------------------------------------- > > Key: HIVE-21227 > URL: https://issues.apache.org/jira/browse/HIVE-21227 > Project: Hive > Issue Type: Bug > Components: Hive > Affects Versions: 4.0.0 > Reporter: Na Li > Assignee: Na Li > Priority: Major > > HIVE-20776 introduces a change that causes regression for view access. > Before the change, a user with select access of a view can get all columns of > a view with select access of a view that is derived from a partitioned table. > With the change, that user cannot access that view. > The reason is that > * When user accesses columns of a view, Hive needs to get the partitions of > the table that the view is derived from. The user name is the user who issues > the query to access the view. > * The change in HIVE-20776 checks if user has access to a table before > getting its partitions. When user only has access of a view, not the access > of a table itself, this change denies the user access of the view. > The solution is when getting table partitions, do not filter on table at HMS > client -- This message was sent by Atlassian JIRA (v7.6.3#76005)