[HIVE-5837] SQL standard based secure authorization for hive

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Done
• Component/s: Authorization, SQLStandardAuthorization
• Assignee: Thejas Nair
• Reporter: Thejas Nair
• Created: 16/Nov/13 03:36
• Updated: 01/Oct/19 22:07
• Resolved: 15/Sep/14 17:56

Description

The current default authorization is incomplete and not secure. The alternative of storage based authorization provides security but does not provide fine grained authorization.

The proposal is to support secure fine grained authorization in hive using SQL standard based authorization model.

Issue Links

• is related to: HIVE-6796 Create/drop roles is case-sensitive whereas 'set role' is case insensitive
• is related to: HIVE-6846 allow safe set commands with sql standard authorization
• is related to: HIVE-6919 hive sql std auth select query fails on partitioned tables
• is related to: HIVE-2302 Allow grant privileges on granting privileges.
• is related to: HIVE-6667 Need support for "show tables" authorization
• is related to: HIVE-6827 Disable insecure commands with std sql auth