[HCATALOG-485] Document that storage-based security ignores GRANT/REVOKE statements

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.5
• Component/s: documentation
• Assignee: Lefty Leverenz
• Reporter: Lefty Leverenz
• Created: 30/Aug/12 07:38
• Updated: 15/Feb/13 21:32
• Resolved: 30/Aug/12 11:20

Description

In HCatalog's authorization doc, explain that the SQL statements GRANT and REVOKE don't work for storage-based security, which uses the read/write permissions of underlying storage entities to determine a user's permissions for databases, tables, and partitions. (This is different from Hive's default authorization, which has RDBMS-style permissions for users, groups, and roles as described in Hive Authorization.)

Issue Links

• relates to: HCATALOG-427 Document storage-based authorization
• relates to: HIVE-3010 HiveAuthorizationProvider should have hooks for authorization statements (grant/revoke etc)