[SENTRY-593] show role grants against object

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Assignee: Johndee Burks
• Reporter: Johndee Burks
• Created: 22/Dec/14 19:43
• Updated: 22/Feb/18 21:56

Description

It would be nice to have a command that would show all roles that have grants against a particular object. For example if I do the following commands.

grant select on table j1 to role analyst;
grant select on table j1 to role analyst1;
grant select on table j1 to role analyst2;

I would like to do something like this:

show grant roles on table j1;

and then it displays something like this:

+-----------+--------+------------+---------+-----------------+-----------------+------------+---------------+-------------------+----------+
| database  | table  | partition  | column  | principal_name  | principal_type  | privilege  | grant_option  |    grant_time     | grantor  |
+-----------+--------+------------+---------+-----------------+-----------------+------------+---------------+-------------------+----------+
| default   |   j1   |            |         | analyst         | ROLE            | select     | false         | 1416861983065000  | hive     |
| default   |   j1   |            |         | analyst1        | ROLE            | select     | false         | 1416861983065000  | hive     |
| default   |   j1   |            |         | analyst2        | ROLE            | select     | false         | 1416861983065000  | hive     |
+-----------+--------+------------+---------+-----------------+-----------------+------------+---------------+-------------------+----------+