[HIVE-5961] Add explain authorize for checking privileges

• Type: Improvement
• Status: Closed
• Priority: Trivial
• Resolution: Fixed
• Fix Version/s: 0.14.0
• Component/s: Authorization
• Assignee: Navis Ryu
• Reporter: Navis Ryu
• Created: 05/Dec/13 06:08
• Updated: 16/Nov/14 20:25
• Resolved: 25/May/14 19:28

Description

For easy checking of need privileges for a query,

explain authorize select * from src join srcpart
INPUTS: 
  default@srcpart
  default@srcpart@ds=2008-04-08/hr=11
  default@srcpart@ds=2008-04-08/hr=12
  default@srcpart@ds=2008-04-09/hr=11
  default@srcpart@ds=2008-04-09/hr=12
  default@src
OUTPUTS: 
  file:/home/navis/apache/oss-hive/itests/qtest/target/tmp/localscratchdir/hive_2013-12-04_21-57-53_748_5323811717799107868-1/-mr-10000
CURRENT_USER: 
  hive_test_user
OPERATION: 
  QUERY
AUTHORIZATION_FAILURES: 
  No privilege 'Select' found for inputs { database:default, table:srcpart, columnName:key}
  No privilege 'Select' found for inputs { database:default, table:src, columnName:key}
  No privilege 'Select' found for inputs { database:default, table:src, columnName:key}

Hopefully good for debugging of authorization, which is in progress on HIVE-5837.

Issue Links

• breaks: HIVE-7194 authorization_ctas.q failing on trunk
• relates to: HIVE-7317 authorization_explain.q fails when run in sequence
• links to: review board