apache / apache/kyuubi

[Bug] Are AUTHZ + HUDI permissions the same as hive permissions?

Open
#5,651 4 comments 0 reactions 0 assignees View on GitHub
kind:bug priority:major
Dominant language
Scala
Stars
2.4k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

### Code of Conduct

- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)

### Search before asking

- [X] I have searched in the [issues](https://github.com/apache/kyuubi/issues?q=is%3Aissue) and found no similar issues.

### Describe the bug

Are AUTHZ + HUDI permissions the same as hive permissions? https://cwiki.apache.org/confluence/display/RANGER/Hive+Commands+to+Ranger+Permission+Mapping
The following issues are found when using AUTHZ
1, SHOW COLUMNS: 'select', 'update', 'create', 'drop', 'alter' can list columns
2, DELETE: there is 'update' permission can not update, use 'select'
3. UPDATE: Use 'select'

### Affects Version(s)

master

### Kyuubi Server Log Output

_No response_

### Kyuubi Engine Log Output

_No response_

### Kyuubi Server Configurations

_No response_

### Kyuubi Engine Configurations

_No response_

### Additional context

_No response_

### Are you willing to submit PR?

- [ ] Yes. I would be willing to submit a PR with guidance from the Kyuubi community to fix.
- [X] No. I cannot submit a PR at this time.

Contributor guide

Open the contributing guide

Research direction

Start by comparing AUTHZ and HUDI permission handling with the linked Ranger Hive permission mapping. Reproduce the reported SHOW COLUMNS, DELETE, and UPDATE cases, then verify that each operation enforces the intended permission and document or test the resulting behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
scala, sql
Domain
authorization, databases
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.