[HIVE-2876] Need more server side authorization for Hive Metastore operations

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Component/s: Metastore
• Labels: metastore security
• Assignee: Unassigned
• Reporter: Rohini Palaniswamy
• Created: 16/Mar/12 16:57
• Updated: 26/Sep/12 02:11
• Resolved: 26/Sep/12 02:11

Description

Currently the metastore client performs the authorization by checking hdfs acls before talking to metastore server which is controlled by hive.security.authorization.enabled setting. Server only does authorization checks for drop operations (HIVE-1943). Need authorization checks for add and alter operations on the server side for better security.

Issue Links

• duplicates: HIVE-2241 Thrift MetaStore interface bypasses authorization checks