[HIVE-1928] GRANT/REVOKE should handle privileges as tokens, not identifiers

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 0.7.0
• Fix Version/s: 0.7.0
• Component/s: Authorization, Security
• Labels: Authorization
• Hadoop Flags: Reviewed
• Assignee: Jonathan Natkins
• Reporter: Carl Steinbach
• Created: 26/Jan/11 01:53
• Updated: 23/May/12 00:26
• Resolved: 17/Feb/11 07:46

Description

The grammar for the GRANT and REVOKE Privileges statements currently handle the list of privileges as a list of
identifiers. Since most of the privileges are also keywords in the HQL grammar this requires users
to individually quote-escape each of the privileges, e.g:

grant `Create` on table authorization_part to user hive_test_user;
grant `Update` on table authorization_part to user hive_test_user;
grant `Drop` on table authorization_part to user hive_test_user;
grant `select` on table src to user hive_test_user;

Both MySQL and the SQL standard treat privileges as tokens. Hive should do the same.

Issue Links

• is related to: HIVE-78 Authorization infrastructure for Hive