[HIVE-21227] HIVE-20776 causes view access regression

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.0.0
• Fix Version/s: 4.0.0-alpha-1
• Component/s: Hive
• Assignee: Na Li
• Reporter: Na Li
• Created: 07/Feb/19 02:42
• Updated: 17/Nov/22 08:55
• Resolved: 08/Feb/19 15:20

Description

HIVE-20776 introduces a change that causes regression for view access.

Before the change, a user with select access of a view can get all columns of a view with select access of a view that is derived from a partitioned table.

With the change, that user cannot access that view.

The reason is that

• When user accesses columns of a view, Hive needs to get the partitions of the table that the view is derived from. The user name is the user who issues the query to access the view.
• The change in HIVE-20776 checks if user has access to a table before getting its partitions. When user only has access of a view, not the access of a table itself, this change denies the user access of the view.

The solution is when getting table partitions, do not filter on table at HMS client

Issue Links

• links to: Code review Link