[SENTRY-716] Hive pluing does not correctly enforce privileges for new in case of nested queries

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.5.0
• Assignee: Ryan P
• Reporter: Prasad Suresh Mujumdar
• Created: 01/May/15 18:54
• Updated: 09/Oct/15 23:48

Description

A nested query on view incorrectly enforces base table privileges instead of view privileges. For example,

create view v1 as select * from t1;
grant select on table v1 to role test;
select * from ( select * from v1) v2;

doesn't work if you have read privilege on view v1. It only works when you have read privilege on underlying table t1.

Issue Links

• is blocked by: HIVE-10875 Select query with view in subquery adds underlying table as direct input