[#6011] fix(authz): MODIFY_TABLE should contain the select table privilege (#6620)

jerqi · web-flow · commit 61cfb52acd1b · 2025-03-07T16:34:41.000+08:00
### What changes were proposed in this pull request? `MODIFY_TABLE` should contain the select table privilege ### Why are the changes needed? More proper semantics Fix: #6011 ### Does this PR introduce _any_ user-facing change? Correct the document. ### How was this patch tested? Modify the UT.
diff --git a/authorizations/authorization-chain/src/test/java/org/apache/gravitino/authorization/chain/integration/test/TestChainedAuthorizationIT.java b/authorizations/authorization-chain/src/test/java/org/apache/gravitino/authorization/chain/integration/test/TestChainedAuthorizationIT.java
@@ -320,22 +320,22 @@ void testCreateTable() throws InterruptedException {
   }
 
   @Test
-  void testReadWriteTableWithMetalakeLevelRole() throws InterruptedException {
+  void testSelectModifyTableWithMetalakeLevelRole() throws InterruptedException {
     // TODO
   }
 
   @Test
-  void testReadWriteTableWithTableLevelRole() throws InterruptedException {
+  void testSelectModifyTableWithTableLevelRole() throws InterruptedException {
     // TODO
   }
 
   @Test
-  void testReadOnlyTable() throws InterruptedException {
+  void testSelectOnlyTable() throws InterruptedException {
     // TODO
   }
 
   @Test
-  void testWriteOnlyTable() throws InterruptedException {
+  void testModifyOnlyTable() throws InterruptedException {
     // TODO
   }
 
@@ -385,32 +385,32 @@ protected void checkTableAllPrivilegesExceptForCreating() {
   }
 
   @Override
-  protected void checkUpdateSQLWithReadWritePrivileges() {
+  protected void checkUpdateSQLWithSelectModifyPrivileges() {
     // TODO
   }
 
   @Override
-  protected void checkUpdateSQLWithReadPrivileges() {
+  protected void checkUpdateSQLWithSelectPrivileges() {
     // TODO
   }
 
   @Override
-  protected void checkUpdateSQLWithWritePrivileges() {
+  protected void checkUpdateSQLWithModifyPrivileges() {
     // TODO
   }
 
   @Override
-  protected void checkDeleteSQLWithReadWritePrivileges() {
+  protected void checkDeleteSQLWithSelectModifyPrivileges() {
     // TODO
   }
 
   @Override
-  protected void checkDeleteSQLWithReadPrivileges() {
+  protected void checkDeleteSQLWithSelectPrivileges() {
     // TODO
   }
 
   @Override
-  protected void checkDeleteSQLWithWritePrivileges() {
+  protected void checkDeleteSQLWithModifyPrivileges() {
     // TODO
   }
 
diff --git a/authorizations/authorization-ranger/src/main/java/org/apache/gravitino/authorization/ranger/RangerAuthorizationHadoopSQLPlugin.java b/authorizations/authorization-ranger/src/main/java/org/apache/gravitino/authorization/ranger/RangerAuthorizationHadoopSQLPlugin.java
@@ -78,6 +78,8 @@ public Map<Privilege.Name, Set<AuthorizationPrivilege>> privilegesMappingRule()
         ImmutableSet.of(RangerHadoopSQLPrivilege.CREATE),
         Privilege.Name.MODIFY_TABLE,
         ImmutableSet.of(
+            RangerHadoopSQLPrivilege.READ,
+            RangerHadoopSQLPrivilege.SELECT,
             RangerHadoopSQLPrivilege.UPDATE,
             RangerHadoopSQLPrivilege.ALTER,
             RangerHadoopSQLPrivilege.WRITE),
diff --git a/authorizations/authorization-ranger/src/test/java/org/apache/gravitino/authorization/ranger/integration/test/RangerBaseE2EIT.java b/authorizations/authorization-ranger/src/test/java/org/apache/gravitino/authorization/ranger/integration/test/RangerBaseE2EIT.java
@@ -191,17 +191,17 @@ protected static void waitForUpdatingPolicies() {
 
   protected abstract void checkTableAllPrivilegesExceptForCreating();
 
-  protected abstract void checkUpdateSQLWithReadWritePrivileges();
+  protected abstract void checkUpdateSQLWithSelectModifyPrivileges();
 
-  protected abstract void checkUpdateSQLWithReadPrivileges();
+  protected abstract void checkUpdateSQLWithSelectPrivileges();
 
-  protected abstract void checkUpdateSQLWithWritePrivileges();
+  protected abstract void checkUpdateSQLWithModifyPrivileges();
 
-  protected abstract void checkDeleteSQLWithReadWritePrivileges();
+  protected abstract void checkDeleteSQLWithSelectModifyPrivileges();
 
-  protected abstract void checkDeleteSQLWithReadPrivileges();
+  protected abstract void checkDeleteSQLWithSelectPrivileges();
 
-  protected abstract void checkDeleteSQLWithWritePrivileges();
+  protected abstract void checkDeleteSQLWithModifyPrivileges();
 
   protected abstract void useCatalog();
 
@@ -313,7 +313,7 @@ void testCreateTable() throws InterruptedException {
   }
 
   @Test
-  void testReadWriteTableWithMetalakeLevelRole() throws InterruptedException {
+  void testSelectModifyTableWithMetalakeLevelRole() throws InterruptedException {
     // Choose a catalog
     useCatalog();
 
@@ -346,10 +346,10 @@ void testReadWriteTableWithMetalakeLevelRole() throws InterruptedException {
     sparkSession.sql(SQL_SELECT_TABLE).collectAsList();
 
     // case 3: Update data in the table
-    checkUpdateSQLWithReadWritePrivileges();
+    checkUpdateSQLWithSelectModifyPrivileges();
 
     // case 4:  Delete data from the table.
-    checkDeleteSQLWithReadWritePrivileges();
+    checkDeleteSQLWithSelectModifyPrivileges();
 
     // case 5: Succeed to alter the table
     testAlterTable();
@@ -368,7 +368,7 @@ void testReadWriteTableWithMetalakeLevelRole() throws InterruptedException {
   }
 
   @Test
-  void testReadWriteTableWithTableLevelRole() throws InterruptedException {
+  void testSelectModifyTableWithTableLevelRole() throws InterruptedException {
     // Choose a catalog
     useCatalog();
 
@@ -410,10 +410,10 @@ void testReadWriteTableWithTableLevelRole() throws InterruptedException {
     sparkSession.sql(SQL_SELECT_TABLE).collectAsList();
 
     // case 3: Update data in the table.
-    checkUpdateSQLWithReadWritePrivileges();
+    checkUpdateSQLWithSelectModifyPrivileges();
 
     // case 4: Delete data from the table.
-    checkDeleteSQLWithReadWritePrivileges();
+    checkDeleteSQLWithSelectModifyPrivileges();
 
     // case 5: Succeed to alter the table
     testAlterTable();
@@ -432,7 +432,7 @@ void testReadWriteTableWithTableLevelRole() throws InterruptedException {
   }
 
   @Test
-  void testReadOnlyTable() throws InterruptedException {
+  void testSelectOnlyTable() throws InterruptedException {
     // Choose a catalog
     useCatalog();
 
@@ -464,10 +464,10 @@ void testReadOnlyTable() throws InterruptedException {
     sparkSession.sql(SQL_SELECT_TABLE).collectAsList();
 
     // case 3: Update data in the table
-    checkUpdateSQLWithReadPrivileges();
+    checkUpdateSQLWithSelectPrivileges();
 
     // case 4: Delete data from the table
-    checkDeleteSQLWithReadPrivileges();
+    checkDeleteSQLWithSelectPrivileges();
 
     // case 5: Fail to alter the table
     Assertions.assertThrows(AccessControlException.class, () -> sparkSession.sql(SQL_ALTER_TABLE));
@@ -486,7 +486,7 @@ void testReadOnlyTable() throws InterruptedException {
   }
 
   @Test
-  void testWriteOnlyTable() throws InterruptedException {
+  void testModifyOnlyTable() throws InterruptedException {
     // Choose a catalog
     useCatalog();
 
@@ -514,15 +514,14 @@ void testWriteOnlyTable() throws InterruptedException {
     // case 1: Succeed to insert data into the table
     sparkSession.sql(SQL_INSERT_TABLE);
 
-    // case 2: Fail to select data from the table
-    Assertions.assertThrows(
-        AccessControlException.class, () -> sparkSession.sql(SQL_SELECT_TABLE).collectAsList());
+    // case 2: Succeed to select data from the table
+    sparkSession.sql(SQL_SELECT_TABLE).collectAsList();
 
     // case 3: Update data in the table
-    checkUpdateSQLWithWritePrivileges();
+    checkUpdateSQLWithModifyPrivileges();
 
     // case 4: Delete data from the table
-    checkDeleteSQLWithWritePrivileges();
+    checkDeleteSQLWithModifyPrivileges();
 
     // case 5: Succeed to alter the table
     testAlterTable();
diff --git a/authorizations/authorization-ranger/src/test/java/org/apache/gravitino/authorization/ranger/integration/test/RangerHiveE2EIT.java b/authorizations/authorization-ranger/src/test/java/org/apache/gravitino/authorization/ranger/integration/test/RangerHiveE2EIT.java
@@ -133,35 +133,35 @@ protected void checkWithoutPrivileges() {
   }
 
   @Override
-  protected void checkUpdateSQLWithReadWritePrivileges() {
+  protected void checkUpdateSQLWithSelectModifyPrivileges() {
     Assertions.assertThrows(
         SparkUnsupportedOperationException.class, () -> sparkSession.sql(SQL_UPDATE_TABLE));
   }
 
   @Override
-  protected void checkUpdateSQLWithReadPrivileges() {
+  protected void checkUpdateSQLWithSelectPrivileges() {
     Assertions.assertThrows(
         SparkUnsupportedOperationException.class, () -> sparkSession.sql(SQL_UPDATE_TABLE));
   }
 
   @Override
-  protected void checkUpdateSQLWithWritePrivileges() {
+  protected void checkUpdateSQLWithModifyPrivileges() {
     Assertions.assertThrows(
         SparkUnsupportedOperationException.class, () -> sparkSession.sql(SQL_UPDATE_TABLE));
   }
 
   @Override
-  protected void checkDeleteSQLWithReadWritePrivileges() {
+  protected void checkDeleteSQLWithSelectModifyPrivileges() {
     Assertions.assertThrows(AnalysisException.class, () -> sparkSession.sql(SQL_DELETE_TABLE));
   }
 
   @Override
-  protected void checkDeleteSQLWithReadPrivileges() {
+  protected void checkDeleteSQLWithSelectPrivileges() {
     Assertions.assertThrows(AnalysisException.class, () -> sparkSession.sql(SQL_DELETE_TABLE));
   }
 
   @Override
-  protected void checkDeleteSQLWithWritePrivileges() {
+  protected void checkDeleteSQLWithModifyPrivileges() {
     Assertions.assertThrows(AnalysisException.class, () -> sparkSession.sql(SQL_DELETE_TABLE));
   }
 
diff --git a/authorizations/authorization-ranger/src/test/java/org/apache/gravitino/authorization/ranger/integration/test/RangerIcebergE2EIT.java b/authorizations/authorization-ranger/src/test/java/org/apache/gravitino/authorization/ranger/integration/test/RangerIcebergE2EIT.java
@@ -111,33 +111,33 @@ protected String testUserName() {
     return System.getenv(HADOOP_USER_NAME);
   }
 
-  public void checkUpdateSQLWithReadWritePrivileges() {
+  public void checkUpdateSQLWithSelectModifyPrivileges() {
     sparkSession.sql(SQL_UPDATE_TABLE);
   }
 
   @Override
-  public void checkUpdateSQLWithReadPrivileges() {
+  public void checkUpdateSQLWithSelectPrivileges() {
     Assertions.assertThrows(AccessControlException.class, () -> sparkSession.sql(SQL_UPDATE_TABLE));
   }
 
   @Override
-  public void checkUpdateSQLWithWritePrivileges() {
-    Assertions.assertThrows(AccessControlException.class, () -> sparkSession.sql(SQL_UPDATE_TABLE));
+  public void checkUpdateSQLWithModifyPrivileges() {
+    sparkSession.sql(SQL_UPDATE_TABLE);
   }
 
   @Override
-  public void checkDeleteSQLWithReadWritePrivileges() {
+  public void checkDeleteSQLWithSelectModifyPrivileges() {
     sparkSession.sql(SQL_DELETE_TABLE);
   }
 
   @Override
-  public void checkDeleteSQLWithReadPrivileges() {
+  public void checkDeleteSQLWithSelectPrivileges() {
     Assertions.assertThrows(AccessControlException.class, () -> sparkSession.sql(SQL_DELETE_TABLE));
   }
 
   @Override
-  public void checkDeleteSQLWithWritePrivileges() {
-    Assertions.assertThrows(AccessControlException.class, () -> sparkSession.sql(SQL_DELETE_TABLE));
+  public void checkDeleteSQLWithModifyPrivileges() {
+    sparkSession.sql(SQL_DELETE_TABLE);
   }
 
   public void checkWithoutPrivileges() {
diff --git a/authorizations/authorization-ranger/src/test/java/org/apache/gravitino/authorization/ranger/integration/test/RangerPaimonE2EIT.java b/authorizations/authorization-ranger/src/test/java/org/apache/gravitino/authorization/ranger/integration/test/RangerPaimonE2EIT.java
@@ -130,32 +130,32 @@ protected void useCatalog() {
   }
 
   @Override
-  protected void checkUpdateSQLWithReadWritePrivileges() {
+  protected void checkUpdateSQLWithSelectModifyPrivileges() {
     // Kyuubi Paimon Ranger plugin doesn't support to update yet.
   }
 
   @Override
-  protected void checkUpdateSQLWithReadPrivileges() {
+  protected void checkUpdateSQLWithSelectPrivileges() {
     // Kyuubi Paimon Ranger plugin doesn't support to update yet.
   }
 
   @Override
-  protected void checkUpdateSQLWithWritePrivileges() {
+  protected void checkUpdateSQLWithModifyPrivileges() {
     // Kyuubi Paimon Ranger plugin doesn't support to update yet.
   }
 
   @Override
-  protected void checkDeleteSQLWithReadWritePrivileges() {
+  protected void checkDeleteSQLWithSelectModifyPrivileges() {
     // Kyuubi Paimon Ranger plugin doesn't support to delete yet.
   }
 
   @Override
-  protected void checkDeleteSQLWithReadPrivileges() {
+  protected void checkDeleteSQLWithSelectPrivileges() {
     // Kyuubi Paimon Ranger plugin doesn't support to delete yet.
   }
 
   @Override
-  protected void checkDeleteSQLWithWritePrivileges() {
+  protected void checkDeleteSQLWithModifyPrivileges() {
     // Kyuubi Paimon Ranger plugin doesn't support to delete yet.
   }
 
diff --git a/docs/security/access-control.md b/docs/security/access-control.md
@@ -202,11 +202,11 @@ and `USE_SCHEMA` privileges on its parent schema.
 
 ### Table privileges
 
-| Name         | Supports Securable Object         | Operation                                        |
-|--------------|-----------------------------------|--------------------------------------------------|
-| CREATE_TABLE | Metalake, Catalog, Schema         | Create a table                                   |
-| MODIFY_TABLE | Metalake, Catalog, Schema, Table  | Write data to a table or modify the table schema |
-| SELECT_TABLE | Metalake, Catalog, Schema, Table  | Select data from a table                         |
+| Name         | Supports Securable Object         | Operation                                                                 |
+|--------------|-----------------------------------|---------------------------------------------------------------------------|
+| CREATE_TABLE | Metalake, Catalog, Schema         | Create a table                                                            |
+| MODIFY_TABLE | Metalake, Catalog, Schema, Table  | Select data from a data, write data to a table or modify the table schema |
+| SELECT_TABLE | Metalake, Catalog, Schema, Table  | Select data from a table                                                  |
 
 ### Topic privileges
 

Original file line number	Diff line number	Diff line change
`@@ -320,22 +320,22 @@ void testCreateTable() throws InterruptedException {`
`320`	`320`	`}`
`321`	`321`
`322`	`322`	`@Test`
`323`		`- void testReadWriteTableWithMetalakeLevelRole() throws InterruptedException {`
	`323`	`+ void testSelectModifyTableWithMetalakeLevelRole() throws InterruptedException {`
`324`	`324`	`// TODO`
`325`	`325`	`}`
`326`	`326`
`327`	`327`	`@Test`
`328`		`- void testReadWriteTableWithTableLevelRole() throws InterruptedException {`
	`328`	`+ void testSelectModifyTableWithTableLevelRole() throws InterruptedException {`
`329`	`329`	`// TODO`
`330`	`330`	`}`
`331`	`331`
`332`	`332`	`@Test`
`333`		`- void testReadOnlyTable() throws InterruptedException {`
	`333`	`+ void testSelectOnlyTable() throws InterruptedException {`
`334`	`334`	`// TODO`
`335`	`335`	`}`
`336`	`336`
`337`	`337`	`@Test`
`338`		`- void testWriteOnlyTable() throws InterruptedException {`
	`338`	`+ void testModifyOnlyTable() throws InterruptedException {`
`339`	`339`	`// TODO`
`340`	`340`	`}`
`341`	`341`
`@@ -385,32 +385,32 @@ protected void checkTableAllPrivilegesExceptForCreating() {`
`385`	`385`	`}`
`386`	`386`
`387`	`387`	`@Override`
`388`		`- protected void checkUpdateSQLWithReadWritePrivileges() {`
	`388`	`+ protected void checkUpdateSQLWithSelectModifyPrivileges() {`
`389`	`389`	`// TODO`
`390`	`390`	`}`
`391`	`391`
`392`	`392`	`@Override`
`393`		`- protected void checkUpdateSQLWithReadPrivileges() {`
	`393`	`+ protected void checkUpdateSQLWithSelectPrivileges() {`
`394`	`394`	`// TODO`
`395`	`395`	`}`
`396`	`396`
`397`	`397`	`@Override`
`398`		`- protected void checkUpdateSQLWithWritePrivileges() {`
	`398`	`+ protected void checkUpdateSQLWithModifyPrivileges() {`
`399`	`399`	`// TODO`
`400`	`400`	`}`
`401`	`401`
`402`	`402`	`@Override`
`403`		`- protected void checkDeleteSQLWithReadWritePrivileges() {`
	`403`	`+ protected void checkDeleteSQLWithSelectModifyPrivileges() {`
`404`	`404`	`// TODO`
`405`	`405`	`}`
`406`	`406`
`407`	`407`	`@Override`
`408`		`- protected void checkDeleteSQLWithReadPrivileges() {`
	`408`	`+ protected void checkDeleteSQLWithSelectPrivileges() {`
`409`	`409`	`// TODO`
`410`	`410`	`}`
`411`	`411`
`412`	`412`	`@Override`
`413`		`- protected void checkDeleteSQLWithWritePrivileges() {`
	`413`	`+ protected void checkDeleteSQLWithModifyPrivileges() {`
`414`	`414`	`// TODO`
`415`	`415`	`}`
`416`	`416`
Original file line number	Diff line number	Diff line change
`@@ -133,35 +133,35 @@ protected void checkWithoutPrivileges() {`
`133`	`133`	`}`
`134`	`134`
`135`	`135`	`@Override`
`136`		`- protected void checkUpdateSQLWithReadWritePrivileges() {`
	`136`	`+ protected void checkUpdateSQLWithSelectModifyPrivileges() {`
`137`	`137`	`Assertions.assertThrows(`
`138`	`138`	`SparkUnsupportedOperationException.class, () -> sparkSession.sql(SQL_UPDATE_TABLE));`
`139`	`139`	`}`
`140`	`140`
`141`	`141`	`@Override`
`142`		`- protected void checkUpdateSQLWithReadPrivileges() {`
	`142`	`+ protected void checkUpdateSQLWithSelectPrivileges() {`
`143`	`143`	`Assertions.assertThrows(`
`144`	`144`	`SparkUnsupportedOperationException.class, () -> sparkSession.sql(SQL_UPDATE_TABLE));`
`145`	`145`	`}`
`146`	`146`
`147`	`147`	`@Override`
`148`		`- protected void checkUpdateSQLWithWritePrivileges() {`
	`148`	`+ protected void checkUpdateSQLWithModifyPrivileges() {`
`149`	`149`	`Assertions.assertThrows(`
`150`	`150`	`SparkUnsupportedOperationException.class, () -> sparkSession.sql(SQL_UPDATE_TABLE));`
`151`	`151`	`}`
`152`	`152`
`153`	`153`	`@Override`
`154`		`- protected void checkDeleteSQLWithReadWritePrivileges() {`
	`154`	`+ protected void checkDeleteSQLWithSelectModifyPrivileges() {`
`155`	`155`	`Assertions.assertThrows(AnalysisException.class, () -> sparkSession.sql(SQL_DELETE_TABLE));`
`156`	`156`	`}`
`157`	`157`
`158`	`158`	`@Override`
`159`		`- protected void checkDeleteSQLWithReadPrivileges() {`
	`159`	`+ protected void checkDeleteSQLWithSelectPrivileges() {`
`160`	`160`	`Assertions.assertThrows(AnalysisException.class, () -> sparkSession.sql(SQL_DELETE_TABLE));`
`161`	`161`	`}`
`162`	`162`
`163`	`163`	`@Override`
`164`		`- protected void checkDeleteSQLWithWritePrivileges() {`
	`164`	`+ protected void checkDeleteSQLWithModifyPrivileges() {`
`165`	`165`	`Assertions.assertThrows(AnalysisException.class, () -> sparkSession.sql(SQL_DELETE_TABLE));`
`166`	`166`	`}`
`167`	`167`
Original file line number	Diff line number	Diff line change
`@@ -111,33 +111,33 @@ protected String testUserName() {`
`111`	`111`	`return System.getenv(HADOOP_USER_NAME);`
`112`	`112`	`}`
`113`	`113`
`114`		`- public void checkUpdateSQLWithReadWritePrivileges() {`
	`114`	`+ public void checkUpdateSQLWithSelectModifyPrivileges() {`
`115`	`115`	`sparkSession.sql(SQL_UPDATE_TABLE);`
`116`	`116`	`}`
`117`	`117`
`118`	`118`	`@Override`
`119`		`- public void checkUpdateSQLWithReadPrivileges() {`
	`119`	`+ public void checkUpdateSQLWithSelectPrivileges() {`
`120`	`120`	`Assertions.assertThrows(AccessControlException.class, () -> sparkSession.sql(SQL_UPDATE_TABLE));`
`121`	`121`	`}`
`122`	`122`
`123`	`123`	`@Override`
`124`		`- public void checkUpdateSQLWithWritePrivileges() {`
`125`		`- Assertions.assertThrows(AccessControlException.class, () -> sparkSession.sql(SQL_UPDATE_TABLE));`
	`124`	`+ public void checkUpdateSQLWithModifyPrivileges() {`
	`125`	`+ sparkSession.sql(SQL_UPDATE_TABLE);`
`126`	`126`	`}`
`127`	`127`
`128`	`128`	`@Override`
`129`		`- public void checkDeleteSQLWithReadWritePrivileges() {`
	`129`	`+ public void checkDeleteSQLWithSelectModifyPrivileges() {`
`130`	`130`	`sparkSession.sql(SQL_DELETE_TABLE);`
`131`	`131`	`}`
`132`	`132`
`133`	`133`	`@Override`
`134`		`- public void checkDeleteSQLWithReadPrivileges() {`
	`134`	`+ public void checkDeleteSQLWithSelectPrivileges() {`
`135`	`135`	`Assertions.assertThrows(AccessControlException.class, () -> sparkSession.sql(SQL_DELETE_TABLE));`
`136`	`136`	`}`
`137`	`137`
`138`	`138`	`@Override`
`139`		`- public void checkDeleteSQLWithWritePrivileges() {`
`140`		`- Assertions.assertThrows(AccessControlException.class, () -> sparkSession.sql(SQL_DELETE_TABLE));`
	`139`	`+ public void checkDeleteSQLWithModifyPrivileges() {`
	`140`	`+ sparkSession.sql(SQL_DELETE_TABLE);`
`141`	`141`	`}`
`142`	`142`
`143`	`143`	`public void checkWithoutPrivileges() {`
Original file line number	Diff line number	Diff line change
`@@ -130,32 +130,32 @@ protected void useCatalog() {`
`130`	`130`	`}`
`131`	`131`
`132`	`132`	`@Override`
`133`		`- protected void checkUpdateSQLWithReadWritePrivileges() {`
	`133`	`+ protected void checkUpdateSQLWithSelectModifyPrivileges() {`
`134`	`134`	`// Kyuubi Paimon Ranger plugin doesn't support to update yet.`
`135`	`135`	`}`
`136`	`136`
`137`	`137`	`@Override`
`138`		`- protected void checkUpdateSQLWithReadPrivileges() {`
	`138`	`+ protected void checkUpdateSQLWithSelectPrivileges() {`
`139`	`139`	`// Kyuubi Paimon Ranger plugin doesn't support to update yet.`
`140`	`140`	`}`
`141`	`141`
`142`	`142`	`@Override`
`143`		`- protected void checkUpdateSQLWithWritePrivileges() {`
	`143`	`+ protected void checkUpdateSQLWithModifyPrivileges() {`
`144`	`144`	`// Kyuubi Paimon Ranger plugin doesn't support to update yet.`
`145`	`145`	`}`
`146`	`146`
`147`	`147`	`@Override`
`148`		`- protected void checkDeleteSQLWithReadWritePrivileges() {`
	`148`	`+ protected void checkDeleteSQLWithSelectModifyPrivileges() {`
`149`	`149`	`// Kyuubi Paimon Ranger plugin doesn't support to delete yet.`
`150`	`150`	`}`
`151`	`151`
`152`	`152`	`@Override`
`153`		`- protected void checkDeleteSQLWithReadPrivileges() {`
	`153`	`+ protected void checkDeleteSQLWithSelectPrivileges() {`
`154`	`154`	`// Kyuubi Paimon Ranger plugin doesn't support to delete yet.`
`155`	`155`	`}`
`156`	`156`
`157`	`157`	`@Override`
`158`		`- protected void checkDeleteSQLWithWritePrivileges() {`
	`158`	`+ protected void checkDeleteSQLWithModifyPrivileges() {`
`159`	`159`	`// Kyuubi Paimon Ranger plugin doesn't support to delete yet.`
`160`	`160`	`}`
`161`	`161`