I tried the above scenario and @Navendu Garg's exact issue is described below:
There is a table say 'default.testtable1' with one of the column names containing a space say 'account name'.
[create table testtable1(Name String,`Account number` String,Age int);
...log/webhcat/webhcat.log.2017-02-14:hive.support.quoted.identifiers=column]
A user say 'user1' has a Hive access policy granting all permissions to user1 on default.testtable1, all columns.
There is also a masking policy which masks column 'name' in same table 'default.testtable1' with mask type='redact' for user1.
select * from default.testtable1 throws:
Error: Error while compiling statement: FAILED: SemanticException org.apache.hadoop.hive.ql.parse.ParseException: line 1:41 rule Identifier failed predicate: {allowQuotedId()}?
line 1:56 rule Identifier failed predicate: {allowQuotedId()}?
line 1:129 rule Identifier failed predicate: {allowQuotedId()}?
line 1:144 rule Identifier failed predicate: {allowQuotedId()}? (state=42000,code=40000)Audit shows only masking policy allowed the txn. There is no deny and no access policy mentioned in the audit. The flow didn't reach the access policies auth.
On disabling the masking policy, the select shows correct results.
NOTE: I tried it with mask type as 'Hash','Partial mask','Nullify' and same result.
@Madhan Neethiraj, Will you pls confirm if this is expected - If any of the column names in a table contain spaces and there is a mask policy on any of that table's columns, then select with fail with the above exception.
