Uploaded image for project: 'Sentry'
  1. Sentry
  2. SENTRY-2500

CREATE on server does not provide HMS server side read authorization for get_all_tables(database_name)

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.2.0
    • Fix Version/s: 2.2.0
    • Component/s: Sentry
    • Labels:
      None

      Description

      If a user has CREATE privileges on server, they are not able to see any tables with the direct call to the HMS api method get_all_tables when server side filtering is enabled.

      Ideally, CREATE privileges on server should give one an unfiltered view of the tables when the user with that privilege calls HMS api method get_all_tables(database_name).

      The solution is to add "CREATE" privilege as one of the required privileges (any one of the privilege will allow) in listing table operation.

        Attachments

        1. SENTRY-2500.005.patch
          29 kB
          Na Li
        2. SENTRY-2500.005.patch
          29 kB
          Na Li
        3. SENTRY-2500.004.patch
          30 kB
          Na Li
        4. SENTRY-2500.003.patch
          29 kB
          Na Li
        5. SENTRY-2500.002.patch
          29 kB
          Na Li
        6. SENTRY-2500.001.patch
          26 kB
          Na Li

          Issue Links

            Activity

              People

              • Assignee:
                LinaAtAustin Na Li
                Reporter:
                LinaAtAustin Na Li
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: