[IMPALA-7002] Referencing non-existent table/database in CTE without any privilege results in AnalysisException and not AuthorizationException

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Impala 2.10.0, Impala 2.11.0, Impala 2.12.0
• Component/s: Frontend
• Labels: security
• Epic Color: ghx-label-5
• Assignee: Wenzhe Zhou
• Reporter: Fredy Wijaya
• Created: 09/May/18 17:35
• Updated: 13/Feb/20 22:21
• Resolved: 13/Feb/20 18:57

Description

A CTE from non-existent database.
[localhost:21000] default> with t as (select id from nodb.alltypes) select * from t;
Query: with t as (select id from nodb.alltypes) select * from t
Query submitted at: 2018-05-09 12:31:29 (Coordinator: http://impdev-dev:25000)
ERROR: AnalysisException: Could not resolve table reference: 'nodb.alltypes'

A normal select from non-existent database.
[localhost:21000] default> select id from nodb.alltypes; Query: select id from nodb.alltypes
Query submitted at: 2018-05-09 12:32:58 (Coordinator: http://fwijaya-dev:25000)
ERROR: AuthorizationException: User 'impdev' does not have privileges to execute 'SELECT' on: nodb.alltypes