Na Li created SENTRY-2500:
-----------------------------

             Summary: CREATE on server does not provide HMS server side read 
authorization for get_all_tables(database_name)
                 Key: SENTRY-2500
                 URL: https://issues.apache.org/jira/browse/SENTRY-2500
             Project: Sentry
          Issue Type: Bug
          Components: Sentry
    Affects Versions: 2.2.0
            Reporter: Na Li
            Assignee: Na Li


If a user has CREATE privileges on server, they are not able to see any tables 
with the direct call to the HMS api method get_all_tables when server side 
filtering is enabled.

Ideally, CREATE privileges on server should give one an unfiltered view of the 
tables when the user with that privilege calls HMS api method 
get_all_tables(database_name).

The solution is to add "CREATE" privilege as one of the required privileges 
(any one of the privilege will allow) in listing table operation.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to