[HIVE-5837] SQL standard based secure authorization for hive

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Done
• Component/s: Authorization, SQLStandardAuthorization
• Assignee: Thejas Nair
• Reporter: Thejas Nair
• Created: 16/Nov/13 03:36
• Updated: 01/Oct/19 22:07
• Resolved: 15/Sep/14 17:56

Description

The current default authorization is incomplete and not secure. The alternative of storage based authorization provides security but does not provide fine grained authorization.

The proposal is to support secure fine grained authorization in hive using SQL standard based authorization model.

Issue Links

• is related to: HIVE-6796 Create/drop roles is case-sensitive whereas 'set role' is case insensitive
• is related to: HIVE-6846 allow safe set commands with sql standard authorization
• is related to: HIVE-6919 hive sql std auth select query fails on partitioned tables
• is related to: HIVE-2302 Allow grant privileges on granting privileges.
• is related to: HIVE-6667 Need support for "show tables" authorization
• is related to: HIVE-6827 Disable insecure commands with std sql auth

Sub-Tasks

• SQL std auth - parser changes: Resolved
• Add a hive authorization plugin api that does not assume privileges needed: Resolved
• SQL std auth - Access control statement updates: Resolved
• SQL std auth - implement set roles, show current roles: Resolved
• SQL std auth - add metastore get_principals_in_role api, support SHOW PRINCIPALS role_name: Resolved
• SQL std auth - add list_all_roles to metastore api: Resolved
• SQL std auth - get_privilege_set should check role hierarchy: Resolved
• SQL std auth - add support to metastore api to list all privileges for a user: Resolved
• SQL std auth - support,authorize new 'show grant..' statements: Resolved
• SQL std auth - support 'show roles': Resolved
• SQL std auth - support DESCRIBE ROLE: Resolved
• SQL std auth - authorize DESCRIBE ROLE role: Resolved
• SQL std auth - authorize show all roles, create role, drop role: Resolved
• SQL std auth - authorize grant/revoke roles: Resolved
• SQL std auth - authorize grant/revoke on table: Resolved
• SQL std auth - metastore api support for get_privilege_set api that checks specific role: Resolved
• SQL std auth - authorize statements that work with paths: Resolved
• SQL std auth - bootstrap SUPERUSER roles: Resolved
• SQL std auth - special handling of PUBLIC role: Resolved
• SQL std auth - authorize create database: Resolved
• sql standard auth should disable commands that impose security risk: Resolved
• SQL std auth - support granted-by in grant statements: Resolved
• SQL std auth - support new privileges INSERT, DELETE: Resolved
• SQL std auth - make role/user optional in grant/revoke statements: Resolved
• support grant/revoke on views - parser changes: Resolved
• sql std auth - authorize 'show roles': Resolved
• sql std auth - view authorization should not underlying table. More tests and fixes.: Resolved
• sql std auth - support 'with admin option' in revoke role metastore api: Closed
• sql std auth - revoke role should support sql standard syntax for admin option: Resolved
• sql standard auth - use admin option specified in grant/revoke role statement: Resolved
• sql std auth - disallow cycles between roles: Resolved
• sql std auth - pass username from sessionstate to v2 authorization interface: Resolved
• sql std auth - document configuration necessary for security: Resolved
• sql std auth - revoke privileges api in metastore should check grantor user: Resolved
• sql std auth - database should have an owner: Resolved
• Test authorization_revoke_table_priv.q is failing on trunk: Resolved
• Disallow transform clause in sql std authorization mode: Resolved
• sql std auth - new users in admin role config should get added: Resolved
• SQL std auth - revert change for view keyword in grant statement: Resolved
• SQL std auth - allow grant/revoke roles if user has ADMIN OPTION: Resolved
• Restrict function create/drop to admin roles: Resolved
• sql std auth - add command to change owner of database: Resolved
• SQL std auth - only db owner should be allowed to create table within a db: Resolved
• SQL std auth - pass username from hiveserver2 to sessionstate: Resolved
• "show grant ... on all" fails with NPE: Resolved
• sql std auth - show grant statement for all principals throws NPE: Resolved
• Revoke privilege should support revoking of grant option: Closed