[HIVE-16497] FileUtils. isActionPermittedForFileHierarchy, isOwnerOfFileHierarchy file system operations should be impersonated

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0
• Component/s: Authorization
• Labels: pull-request-available
• Assignee: Thejas Nair
• Reporter: Thejas Nair
• Created: 21/Apr/17 09:06
• Updated: 24/Jun/20 00:26
• Resolved: 02/May/17 17:35

Description

FileUtils.isActionPermittedForFileHierarchy checks if user has permissions for given action. The checks are made by impersonating the user.
However, the listing of child dirs are done as the hiveserver2 user. If the hive user doesn't have permissions on the filesystem, it gives incorrect error that the user doesn't have permissions to perform the action.
Impersonating the end user for all file operations in that function is also logically correct thing to do.

Issue Links

• links to: github pull request
• links to: GitHub Pull Request #171
• links to: GitHub Pull Request #171