[HIVE-5635] WebHCatJTShim23 ignores security/user context

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.12.0
• Fix Version/s: 0.13.0
• Component/s: WebHCat
• Assignee: Eugene Koifman
• Reporter: Eugene Koifman
• Created: 24/Oct/13 00:32
• Updated: 20/Jan/14 17:55
• Resolved: 20/Nov/13 23:11

Description

WebHCatJTShim23 takes UserGroupInformation object as argument (which represents the user make the call to WebHCat or doAs user) but ignores.

WebHCatJTShim20S uses the UserGroupInformation

This is inconsistent and may be a security hole because in with Hadoop 2 the methods on WebHCatJTShim are likely running with 'hcat' as the user context.