[HIVE-7533] sql std auth - set authorization privileges for tables when created from hive cli

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.14.0
• Component/s: Authorization, SQLStandardAuthorization
• Assignee: Thejas Nair
• Reporter: Thejas Nair
• Created: 28/Jul/14 20:04
• Updated: 13/Nov/14 19:42
• Resolved: 15/Aug/14 22:40

Description

As SQL standard authorization mode is not available from hive-cli, the default permissions on table for the table owner are not being set, when the table is created from hive-cli.

It should be possible set the sql standards based authorization as the authorizer for hive-cli, which would update the configuration appropriately.

hive-cli data access is actually controlled by hdfs, not the authorization policy. As a result, using sql std auth from hive-cli for authorization would lead to a false sense of security. To avoid this, hive-cli users will have to keep the authorization disabled on hive-cli (in case of sql std auth). But this would affect only authorization checks, not configuration updates by the authorizer.

Issue Links

• contains: HIVE-7447 pass authorization context information in calls to authorize commandprocessor commands
• is related to: HIVE-7759 document hive cli authorization behavior when SQL std auth is enabled
• links to: review board