[HIVE-8893] Implement whitelist for builtin UDFs to avoid untrused code execution in multiuser mode

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.14.0
• Fix Version/s: 1.1.0
• Component/s: Authorization, HiveServer2, SQL
• Assignee: Prasad Suresh Mujumdar
• Reporter: Prasad Suresh Mujumdar
• Created: 17/Nov/14 02:45
• Updated: 12/Feb/15 23:41
• Resolved: 20/Nov/14 19:34

Description

The udfs like reflect() or java_method() enables executing a java method as udf. While this offers lot of flexibility in the standalone mode, it can become a security loophole in a secure multiuser environment. For example, in HiveServer2 one can execute any available java code with user hive's credentials.
We need a whitelist and blacklist to restrict builtin udfs in Hiveserver2.

Issue Links

• relates to: HIVE-9473 sql std auth should disallow built-in udfs that allow any java methods to be called
• links to: Review #28115