apache / apache/kyuubi

[Bug] Kyuubi Spark Authz show databases/tables no data returned

Open
#5,820 9 comments 2 reactions 0 assignees View on GitHub
kind:bug priority:major
Dominant language
Scala
Stars
2.4k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

### Code of Conduct

- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)

### Search before asking

- [X] I have searched in the [issues](https://github.com/apache/kyuubi/issues?q=is%3Aissue) and found no similar issues.

### Describe the bug

Kyuubi Spark Authz is connected to ranger1.2.0 and configured with relevant policies
![image](https://github.com/apache/kyuubi/assets/18652779/827af68b-3d79-4681-b0cb-95fe3b3bcff0)

This policy can be displayed normally on the spark-sql command line
![image](https://github.com/apache/kyuubi/assets/18652779/14f60828-d999-42f2-b9cf-0ca9315f39a6)

However, through access in kyuubi, the beeline/ldap method returns empty,the select specific strategy table can query data normally
2ed9ba82b6dd225421e5359192c8a98

### Affects Version(s)

1.8.0

### Kyuubi Server Log Output

```logtalk
no
```

### Kyuubi Engine Log Output

```logtalk
no
```

### Kyuubi Server Configurations

```yaml
no
```

### Kyuubi Engine Configurations

```yaml
no
```

### Additional context

no

### Are you willing to submit PR?

- [ ] Yes. I would be willing to submit a PR with guidance from the Kyuubi community to fix.
- [X] No. I cannot submit a PR at this time.

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the empty database/table results through Kyuubi using beeline with LDAP, and compare them with the working spark-sql behavior against Ranger 1.2.0. Investigate the Kyuubi Spark Authz path; done means authorized database and table listings return data while the existing permitted table queries continue to work.

Written by the indexing model from the issue text.

Assessment

Tech stack
scala, spark
Domain
authorization, databases
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.