Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-8221

authorize additional metadata read operations in metastore storage based authorization

Log workAgile BoardRank to TopRank to BottomVotersWatch issueWatchersCreate sub-taskConvert to sub-taskMoveLinkCloneLabelsUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Blocker
    • Resolution: Fixed
    • None
    • 0.14.0
    • Authorization
    • None
    • Hide
      Storagebased authorization now authorizes read privilege on database and tables. get_database api call needs database directory read privilege. get_table_* calls that fetch table information and get_partition_* calls to list the partitions of a table require read privilege on the table directory.
      . It is enabled by default with Storagebased authorization. Set hive.security.metastore.authorization.auth.reads=false to disable this check in storage based authorization.
      Show
      Storagebased authorization now authorizes read privilege on database and tables. get_database api call needs database directory read privilege. get_table_* calls that fetch table information and get_partition_* calls to list the partitions of a table require read privilege on the table directory. . It is enabled by default with Storagebased authorization. Set hive.security.metastore.authorization.auth.reads=false to disable this check in storage based authorization.

    Description

      Table and database metadata read operations should also be authorized by storage based authorization, when enabled in hive metastore.

      Attachments

        1. HIVE-8221.1.patch
          37 kB
          Thejas Nair
        2. HIVE-8221.2.patch
          72 kB
          Thejas Nair

        Issue Links

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            thejas Thejas Nair Assign to me
            thejas Thejas Nair
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Issue deployment