Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-5837 SQL standard based secure authorization for hive
  3. HIVE-5928

Add a hive authorization plugin api that does not assume privileges needed

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 0.13.0
    • Authorization
    • None

    Description

      The existing HiveAuthorizationProvider interface implementations can be used to support custom authorization models.
      But this interface limits the customization for these reasons -
      1. It has assumptions about the privileges required for an action.
      2. It does have not functions that you can implement for having custom ways of doing the actions of access control statements.

      This jira proposes a new interface HiveAuthorizer that does not make assumptions of the privileges required for the actions. The authorize() functions will be equivalent of authorize(<operation type>, <input objects>, <output objects>). It will also have functions that will be called from the access control statements.

      The current HiveAuthorizationProvider will continue to be supported for backward compatibility.

      Attachments

        1. HIVE-5928.2.patch
          62 kB
          Thejas Nair
        2. HIVE-5928.1.patch
          57 kB
          Thejas Nair
        3. hive_auth_class_preview.txt
          2 kB
          Thejas Nair

        Issue Links

          Activity

            People

              thejas Thejas Nair
              thejas Thejas Nair
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - 120h
                  120h
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 6h Time Not Required
                  6h