[HIVE-12698] Remove exposure to internal privilege and principal classes in HiveAuthorizer

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3.0, 2.0.0
• Fix Version/s: 1.3.0, 2.0.0
• Component/s: Authorization
• Labels: pull-request-available
• Assignee: Thejas Nair
• Reporter: Thejas Nair
• Created: 17/Dec/15 01:14
• Updated: 24/Jun/20 00:27
• Resolved: 18/Dec/15 20:29

Description

The changes in HIVE-11179 expose several internal classes to HiveAuthorization implementations. These include PrivilegeObjectDesc, PrivilegeDesc, PrincipalDesc and AuthorizationUtils.

We should avoid exposing that to all Authorization implementations, but also make the ability to customize the mapping of internal classes to the public api classes possible for Apache Sentry (incubating).

Issue Links

• breaks: SENTRY-997 Update HiveAuthorizer of Sentry after HiveAuthorizer interface changes
• relates to: RANGER-791 Update ranger to work with HiveAuthorizer interface changes
• relates to: HIVE-12722 Create abstract subclass for HiveAuthorizer to shield implementations from interface changes
• relates to: HIVE-11179 HIVE should allow custom converting from HivePrivilegeObjectDesc to privilegeObject for different authorizers
• links to: GitHub Pull Request #58