[SENTRY-2500] CREATE on server does not provide HMS server side read authorization for get_all_tables(database_name)

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.0
• Fix Version/s: 2.2.0
• Component/s: Sentry
• Assignee: Na Li
• Reporter: Na Li
• Created: 15/Feb/19 15:44
• Updated: 21/Feb/19 17:23
• Resolved: 21/Feb/19 17:17

Description

If a user has CREATE privileges on server, they are not able to see any tables with the direct call to the HMS api method get_all_tables when server side filtering is enabled.

Ideally, CREATE privileges on server should give one an unfiltered view of the tables when the user with that privilege calls HMS api method get_all_tables(database_name).

The solution is to add "CREATE" privilege as one of the required privileges (any one of the privilege will allow) in listing table operation.

Issue Links

• links to: Review Link for this case