[HIVE-5923] SQL std auth - parser changes

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.13.0
• Component/s: Authorization

Release Note

Grant privilege and revoke privilege statements don't have the requirement (but not the option) for the noise word TABLE.
 TABLE is the assumed default for grant and revoke statements.
Hive’s syntax changes from "GRANT action ON TABLE table TO grantee" to "GRANT action ON [TABLE] table TO grantee".

Grant role and revoke role statements has been changed to remove the need for keyword ROLE.

Support for WITH ADMIN OPTION has been added to grant role and revoke role statement syntax.

• Assignee: Thejas Nair
• Reporter: Thejas Nair
• Created: 03/Dec/13 04:14
• Updated: 22/Jul/14 06:41
• Resolved: 03/Jan/14 23:24

Description

There are new access control statements proposed in the functional spec in HIVE-5837 . It also proposes some small changes to the existing query syntax (mostly extensions and some optional keywords).

The syntax supported should depend on the current authorization mode.

Issue Links

• blocks: HIVE-5930 SQL std auth - implement set roles, show current roles
• blocks: HIVE-5940 SQL std auth - support,authorize new 'show grant..' statements
• blocks: HIVE-5942 SQL std auth - support DESCRIBE ROLE
• links to: reviewboard link