Description
Authorization for some DDL operation needs to check if the user has grant option. The authorization process should be extended to support this.
For example, "ALTER TABLE SET OWNER" command is special in the sense that it is both DDL option that updates metadata, and it implicitly transfers privileges (permission update). Therefore, authorizing this command requires both privilege for changing metadata and grant option.
Attachments
Issue Links
- relates to
-
SENTRY-2255 alter table set owner command can be executed only by user with proper privilege
-
- Resolved
-