New Contributor
Posts: 4
Registered: ‎01-25-2017

Impala - sentry - grant suggestions


Some suggestion for future versions:

1.- When you grant permissions to an user just to view one or two fields in an Impala table, the user is able to view all the fields with "Describe" directive, I think it's more logical the the user just can view the fields where has permissions


2.- When the user has permissions just over few columns, and try to SELECT over other field, you receive an error, but it's a generic error:


"User XXXX does not have privileges to execute 'SELECT' on: schema.tableXXX"


Probably the error should be "User XXXX does not have privileges to execute 'SELECT' on: schema.tableXXX.FIELD", adding the field name, to avoid confussion


Hope will help