[IMPALA-9223] Don't require privileges on unmaterialized columns

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Security
• Epic Color: ghx-label-6
• Assignee: Unassigned
• Reporter: Quanlong Huang
• Created: 08/Dec/19 11:51
• Updated: 22/Mar/21 23:30

Description

Impala requires user privileges on all columns in the query, no matter whether those columns are materialized. This is a different behavior than Hive's.

For instance, for query "select id from (select * from customer_tiny) t", only the id column is materialized. Hive only requires SELECT privilege on the id column. However, Impala requires SELECT privileges on the table or all columns of the table.

We should consider taking the same behavior of Hive.