[SENTRY-846] [column level privilege] show table extended doesn't require table level privilege

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Not A Problem
• Affects Version/s: 1.7.0
• Component/s: Hive Plugin
• Assignee: shenguoquan
• Reporter: Anne Yu
• Created: 13/Aug/15 22:48
• Updated: 15/Dec/15 07:59
• Resolved: 15/Dec/15 07:59

Description

use column level privilege,

0: jdbc:hive2://anneyu-cdh55-1.vpc.cloudera.c> show tables in test_db like 'test_tb';
+-----------+--+
| tab_name  |
+-----------+--+
| test_tb   |
+-----------+--+

show table extended in test_db like 'test_tb';
Error: Error while compiling statement: FAILED: SemanticException No valid privileges
 Required privileges for this query: Server=server1->Db=test_db->Table=test_tb->action=insert;Server=server1->Db=test_db->Table=test_tb->action=select; (state=42000,code=40000)

Do we want to let user see their column info ? such as,

columns:struct columns { string s, i32 i}