[HIVE-24247] StorageBasedAuthorizationProvider does not look into Hadoop ACL while check for access

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Invalid
• Labels: pull-request-available
• Assignee: Adesh Kumar Rao
• Reporter: Adesh Kumar Rao
• Created: 09/Oct/20 06:40
• Updated: 14/Oct/20 06:53
• Resolved: 14/Oct/20 06:53

Description

StorageBasedAuthorizationProvider uses

FileSystem.access(Path, Action)

method to check the access.

This method gets the FileStatus object and checks access based on that. ACL's are not present in FileStatus.

 

Instead, Hive should use

FileSystem.get(path.toUri(), conf);

<SpecificFileSystemImplementation>.access(Path, Action)

where the implemented file system can do the access checks.

Issue Links

• links to: GitHub Pull Request #1575