[HIVE-5959] SQL std auth - bootstrap SUPERUSER roles

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.13.0
• Component/s: Authorization
• Release Note: A new property is added in HiveConf. {{hive.users.in.admin.role}} An admin can provide a comma separated list of users which will be added to admin role when metastore starts up. More users can still be added later on.
• Assignee: Ashutosh Chauhan
• Reporter: Thejas Nair
• Created: 05/Dec/13 03:16
• Updated: 16/Mar/14 07:03
• Resolved: 30/Jan/14 18:51

Description

SUPERUSER and PUBLIC are two roles that are always present, these need to be added automatically on metastore startup. This would be similar to creation of the "default" database from HMSHandler.init().

A config param in hive-site.xml will be used to specify the list of users who belong to the SUPERUSER role.

Issue Links

• blocks: HIVE-5944 SQL std auth - authorize show all roles, create role, drop role