[ 
https://issues.apache.org/jira/browse/HIVE-21227?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Na Li updated HIVE-21227:
-------------------------
    Attachment: HIVE-21227.002.patch

> HIVE-20776 causes view access regression
> ----------------------------------------
>
>                 Key: HIVE-21227
>                 URL: https://issues.apache.org/jira/browse/HIVE-21227
>             Project: Hive
>          Issue Type: Bug
>          Components: Hive
>    Affects Versions: 4.0.0
>            Reporter: Na Li
>            Assignee: Na Li
>            Priority: Major
>         Attachments: HIVE-21227.001.patch, HIVE-21227.002.patch
>
>
> HIVE-20776 introduces a change that causes regression for view access.
> Before the change, a user with select access of a view can get all columns of 
> a view with select access of a view that is derived from a partitioned table.
> With the change, that user cannot access that view.
> The reason is that
> * When user accesses columns of a view, Hive needs to get the partitions of 
> the table that the view is derived from. The user name is the user who issues 
> the query to access the view.
> *  The change in HIVE-20776 checks if user has access to a table before 
> getting its partitions. When user only has access of a view, not the access 
> of a table itself, this change denies the user access of the view. 
> The solution is when getting table partitions, do not filter on table at HMS 
> client



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to