[DRILL-2744] Provide error message when trying to query MapR-DB or HBase tables with insufficient priviliges

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.8.0
• Fix Version/s: Future
• Component/s: Storage - HBase
• Labels: security
• Assignee: Unassigned
• Reporter: Andries Engelbrecht
• Created: 10/Apr/15 00:37
• Updated: 01/Nov/17 12:27

Description

When creating MapR-DB tables with different privileges Drill will return no results for tables with insufficient privileges. Propose an error is returned so the user is aware of the issue, instead of simply no data being returned.

This can be a serious issue with complex queries when joining data across multiple data sources.

Creating 2 tables - one with mapr user and the other as root.

lr--------. 1 mapr mapr 2 Apr 9 17:51 customers -> mapr::table::2057.45.1574734
lr--------. 1 root root 2 Apr 10 00:21 test -> mapr::table::2057.48.1574740

hbase(main):005:0> get "test", "r1"
COLUMN CELL
col1: timestamp=1428625497000, value=a
col2: timestamp=1428625506268, value=b
2 row(s) in 0.0380 seconds

0: jdbc:drill:zk=drilldemo:5181> show tables;
------------------------+

TABLE_SCHEMA

TABLE_NAME

------------------------+

maprdb	test
maprdb	customers

------------------------+
2 rows selected (0.098 seconds)

querying test tables simply returns no results instead of an error.

0: jdbc:drill:zk=drilldemo:5181> select * from test;
--

--
--
No rows selected (0.059 seconds)

Customers does return data due to sufficient privileges.

0: jdbc:drill:zk=drilldemo:5181> select * from customers limit 1;
------------------------------------------+

row_key

address

loyalty

personal

------------------------------------------+

[B@6e22c013

{"state":"InZhIg=="}

{"agg_rev":"MTk3","membership":"InNpbHZlciI="}

{"age":"IjE1LTIwIg==","gender":"IkZFTUFMRSI=","name":"IkNvcnJpbmUgTWVjaGFtIg=="}

------------------------------------------+
1 row selected (0.236 seconds)