[ https://issues.apache.org/jira/browse/HIVE-25547?focusedWorklogId=669031&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-669031 ]
ASF GitHub Bot logged work on HIVE-25547: ----------------------------------------- Author: ASF GitHub Bot Created on: 22/Oct/21 16:26 Start Date: 22/Oct/21 16:26 Worklog Time Spent: 10m Work Description: saihemanth-cloudera closed pull request #2666: URL: https://github.com/apache/hive/pull/2666 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: gitbox-unsubscr...@hive.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org Issue Time Tracking ------------------- Worklog Id: (was: 669031) Time Spent: 0.5h (was: 20m) > ALTER VIEW AS SELECT statement should create authorizable events in > HiveServer2 > ------------------------------------------------------------------------------- > > Key: HIVE-25547 > URL: https://issues.apache.org/jira/browse/HIVE-25547 > Project: Hive > Issue Type: Bug > Affects Versions: 4.0.0 > Reporter: Sai Hemanth Gantasala > Assignee: Sai Hemanth Gantasala > Priority: Major > Labels: pull-request-available > Fix For: 4.0.0 > > Time Spent: 0.5h > Remaining Estimate: 0h > > Consider the scenario: > {code:java} > -- A privileged user is doing the following actions. > Create table foo_tbl(i int); > Create table foo_bar(name string); > Create view foo_view as select * from foo_tbl; > -- An unprivileged user can do the following operation, when he/she has > select privileges on foo_bar table but he/she doesn't have any privileges on > foo_tbl or foo_view. > alter view foo_view as select * from foo_bar;{code} > An unauthorized user shouldn't be able to alter the view schema when he/she > doesn't have any privileges on that view. > > > -- This message was sent by Atlassian Jira (v8.3.4#803005)