[HIVE-7583] Use FileSystem.access() if available to check file access for user

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.14.0
• Labels: TODOC14
• Assignee: Jason Dere
• Reporter: Jason Dere
• Created: 01/Aug/14 00:17
• Updated: 13/Nov/14 19:40
• Resolved: 06/Aug/14 22:16

Description

Hive currently implements its own file access checks to determine if a user is allowed to perform an specified action on a file path (in StorageBasedAuthorizationProvider, also FileUtils). This can be prone to errors or inconsistencies with how file access is actually checked in Hadoop.
HDFS-6570 adds a new FileSystem.access() API, so that we can perform the check using the actual HDFS logic rather than having to imitate that behavior in Hive. For versions of Hadoop that have this API available, we should use this API.

Issue Links

• is duplicated by: HIVE-7714 Implement ACL support for Storage-System Based Authorization
• is related to: HDFS-6570 add api that enables checking if a user has certain permissions on a file
• links to: https://reviews.apache.org/r/24170/