[SENTRY-1443] Column level permissions improvements

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Sravya Tirukkovalur
• Created: 16/Aug/16 21:05
• Updated: 16/Aug/16 21:10

Description

We need a way for users to know which columns they have access to in a given table and the properties of that column

• One solution is to allow describe (all forms of it) to be executed for all user who atleast have permission on one column in it, but filter out columns which user does not have access to.
• Another way is a better "Show command".

Issue Links

• is related to: SENTRY-743 [Column level privileges] Column existence should be hidden for users with no privileges on that column
• is related to: SENTRY-848 [column level privilege] if grant user column level select privilege, DESCRIBE FORMATTED table[.column] shouldn't require extra table level privilege
• is related to: SENTRY-1241 Enable Show Grant user in hive binding
• is related to: SENTRY-1242 Enable getting all privileges on a hive object