[HIVE-3009] do authorization for all metadata operations

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Authorization, Metastore
• Assignee: Vandana Ayyalasomayajula
• Reporter: Thejas Nair
• Created: 08/May/12 17:51
• Updated: 13/Mar/14 21:14

Description

Most of the metadata read operations and some write operations are not checking for authorization.
See org.apache.hadoop.hive.ql.plan.HiveOperation . Operations such as DESCTABLE and DROPDATABASE have null for required privileges.