[HIVE-6093] table creation should fail when user does not have permissions on db

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 0.12.0, 0.13.0
• Fix Version/s: 0.14.0
• Component/s: Authorization, HCatalog, Metastore
• Labels: authorization metastore security
• Release Note: One cannot create table (whether or not they provide a LOCATION) if they do not have WRITE permission on the database directory.
• Assignee: Thiruvel Thirumoolan
• Reporter: Thiruvel Thirumoolan
• Created: 20/Dec/13 22:18
• Updated: 13/Nov/14 19:43
• Resolved: 15/Aug/14 23:50

Description

Its possible to create a table under a database where the user does not have write permission. It can be done by specifying a LOCATION where the user has write access (say /tmp/foo). This should be restricted.

HdfsAuthorizationProvider (which typically runs on client) checks the database directory during table creation. But StorageBasedAuthorizationProvider does not.