Fang-Yu Rao has posted comments on this change. ( http://gerrit.cloudera.org:8080/23383 )
Change subject: IMPALA-14295: [WIP] Support table masking for the Calcite planner ...................................................................... Patch Set 5: (1 comment) http://gerrit.cloudera.org:8080/#/c/23383/5/java/calcite-planner/src/main/java/org/apache/impala/calcite/service/ImpalaSqlValidatorImpl.java File java/calcite-planner/src/main/java/org/apache/impala/calcite/service/ImpalaSqlValidatorImpl.java: http://gerrit.cloudera.org:8080/#/c/23383/5/java/calcite-planner/src/main/java/org/apache/impala/calcite/service/ImpalaSqlValidatorImpl.java@351 PS5, Line 351: CalciteMetadataHandler.TableVisitor tableVisitor = : new CalciteMetadataHandler.TableVisitor(/* currentDb */ "default"); : parsedSqlNode.accept(tableVisitor); : return validate(parsedSqlNode); > validate(parsedSqlNode) does not register the table-level privilege request One way to reproduce this issue is to define a custom column-masking policy on the column 'functional.alltypesagg.bigint_col' like the following. (select count(*) from functional.alltypestiny) Then we execute the following in https://github.com/apache/impala/blob/master/testdata/workloads/functional-query/queries/QueryTest/ranger_column_masking.test. select id, bigint_col from functional.alltypesagg order by id limit 10; -- To view, visit http://gerrit.cloudera.org:8080/23383 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: comment Gerrit-Change-Id: I3d9cf028078762f78cf0f82b817bdc1ee37e180b Gerrit-Change-Number: 23383 Gerrit-PatchSet: 5 Gerrit-Owner: Fang-Yu Rao <[email protected]> Gerrit-Reviewer: Fang-Yu Rao <[email protected]> Gerrit-Reviewer: Impala Public Jenkins <[email protected]> Gerrit-Comment-Date: Sat, 08 Nov 2025 00:10:22 +0000 Gerrit-HasComments: Yes
