[Bug] Are AUTHZ + HUDI permissions the same as hive permissions?
- Dominant language
- Scala
- Stars
- 2.4k
- Forks
- 1k
- PR merge metrics
- No merged PRs in 30d
Description
### Code of Conduct
- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)
### Search before asking
- [X] I have searched in the [issues](https://github.com/apache/kyuubi/issues?q=is%3Aissue) and found no similar issues.
### Describe the bug
Are AUTHZ + HUDI permissions the same as hive permissions? https://cwiki.apache.org/confluence/display/RANGER/Hive+Commands+to+Ranger+Permission+Mapping
The following issues are found when using AUTHZ
1, SHOW COLUMNS: 'select', 'update', 'create', 'drop', 'alter' can list columns
2, DELETE: there is 'update' permission can not update, use 'select'
3. UPDATE: Use 'select'
### Affects Version(s)
master
### Kyuubi Server Log Output
_No response_
### Kyuubi Engine Log Output
_No response_
### Kyuubi Server Configurations
_No response_
### Kyuubi Engine Configurations
_No response_
### Additional context
_No response_
### Are you willing to submit PR?
- [ ] Yes. I would be willing to submit a PR with guidance from the Kyuubi community to fix.
- [X] No. I cannot submit a PR at this time.
Contributor guide
Research direction
Start by comparing AUTHZ and HUDI permission handling with the linked Ranger Hive permission mapping. Reproduce the reported SHOW COLUMNS, DELETE, and UPDATE cases, then verify that each operation enforces the intended permission and document or test the resulting behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- scala, sql
- Domain
- authorization, databases
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100