apache / kyuubi

Apache Kyuubi is a distributed and multi-tenant gateway to provide serverless SQL on data warehouses and lakehouses.
https://kyuubi.apache.org/
Apache License 2.0
2.11k stars 914 forks source link

[Bug][Authz] Paimon doesn't support delete/update operatons #6803

Open jerqi opened 1 week ago

jerqi commented 1 week ago

Code of Conduct

Search before asking

Describe the bug

The user only has the read privilege in the Ranger service but can execute the SQL update and delete. kyuubi-spark-authz-shaded_2.12:1.10.0

Affects Version(s)

master/1.10.0

Kyuubi Server Log Output

There is no AccessControlException to throw.

Kyuubi Engine Log Output

There is no AccessControlException to throw.

Kyuubi Server Configurations

There is no AccessControlException to throw.

Kyuubi Engine Configurations

There is no AccessControlException to throw.

Additional context

No response

Are you willing to submit PR?

github-actions[bot] commented 1 week ago

Hello @jerqi, Thanks for finding the time to report the issue! We really appreciate the community's efforts to improve Apache Kyuubi.

yaooqinn commented 1 week ago

Authorization for Paimon is not fully support yet, I believe their some Paimon specific LogicalPlans that we need to visit