[HIVE-12429] Switch default Hive authorization to SQLStandardAuth in 2.0

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.0.0
• Component/s: Authorization, Security
• Labels: TODOC2.0
• Target Version/s: 2.0.0
• Hadoop Flags: Incompatible change
• Assignee: Daniel Dai
• Reporter: Alan Gates
• Created: 16/Nov/15 23:43
• Updated: 01/Oct/19 22:07
• Resolved: 19/Jan/16 20:50

Description

Hive's default authorization is not real security, as it does not secure a number of features and anyone can grant access to any object to any user. We should switch the default to SQLStandardAuth, which provides real authentication.

As this is a backwards incompatible change this was hard to do previously, but 2.0 gives us a place to do this type of change.

By default authorization will still be off, as there are a few other things to set when turning on authorization (such as the list of admin users).