[HIVE-7895] Storage based authorization should consider sticky bit for drop actions

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.14.0
• Component/s: Authorization
• Assignee: Thejas Nair
• Reporter: Thejas Nair
• Created: 27/Aug/14 22:25
• Updated: 13/Nov/14 19:43
• Resolved: 30/Aug/14 00:24

Description

Storage based authorization provides access control for metadata by giving users permissions on metadata that are equivalent to the permission that user has on corresponding data.
However, when checking the permissions to drop a metadata object such as database, table or partition, it does not check if the sticky bit is set on the parent dir of objects corresponding dir in hdfs.

Issue Links

• is part of: HIVE-6225 hive.metastore.authorization.storage.checks doesn't respect sticky bit
• supercedes: HIVE-7872 StorageBasedAuthorizationProvider should check access perms of parent directory for DROP actions
• links to: review board