[AUTHZ][Improvement] insert into table should check the update privilege for table about kyuubi HOT 6 OPEN

Hello @liujiayi771,
Thanks for finding the time to report the issue!
We really appreciate the community's efforts to improve Apache Kyuubi.

from kyuubi.

Hi @pan3793. How do you think?

from kyuubi.

cc @yaooqinn, thanks.

from kyuubi.

sounds reasonable to me, but can we double check other DBs implementations?

from kyuubi.

@pan3793 I have tested Hive and Trino ranger plugin. They all check the privilege of table when insert into table.

Hive:

Error: Error while compiling statement: FAILED: HiveAccessControlException Permission denied: user [ranger] does not have [UPDATE] privilege on [database=testdb/table=test] (state=42000,code=40000)

Trino:

trino:testdb> insert into test values(1);
Query 20240729_135814_00054_g5bf9 failed: Access Denied: Cannot insert into table test

So I will submit a PR for this change.

from kyuubi.

Thanks for checking, please go ahead to submit PR to fix it.

from kyuubi.