[HIVE-6245] HS2 creates DBs/Tables with wrong ownership when HMS setugi is true

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.12.0, 0.13.0
• Fix Version/s: 0.14.0
• Component/s: HiveServer2
• Assignee: Venki Korukanti
• Reporter: Chaoyu Tang
• Created: 21/Jan/14 03:24
• Updated: 15/Oct/15 17:41
• Resolved: 28/Aug/14 23:30

Description

The case with following settings is valid but does not work correctly in current HS2:
==
hive.server2.authentication=NONE (or LDAP)
hive.server2.enable.doAs= true
hive.metastore.sasl.enabled=false
hive.metastore.execute.setugi=true
==
Ideally, HS2 is able to impersonate the logged in user (from Beeline, or JDBC application) and create DBs/Tables with user's ownership.

Issue Links

• depends upon: HIVE-7807 Refer to umask property using FsPermission.UMASK_LABEL.
• is related to: HIVE-6312 doAs with plain sasl auth should be session aware
• relates to: HIVE-7890 SessionState creates HMS Client while not impersonating
• relates to: HIVE-12188 DoAs does not work properly in non-kerberos secured HS2
• links to: ReviewBoard