[HIVE-8945] Allow user to read encrypted read-only tables only if the scratch directory is encrypted

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: encryption-branch
• Assignee: Sergio Peña
• Reporter: Sergio Peña
• Created: 21/Nov/14 20:58
• Updated: 21/Nov/14 21:57
• Resolved: 21/Nov/14 21:57

Description

With the changes for hdfs encryption, hive creates a staging directory inside table locations. If an user access a table as read-only access, then the staging directory is created in the old scratch directory (hive.exec.scratchdir).

This does not work if the table to access is encrypted for security reasons. We don't want that encrypted data is written to an unencrypted zone. But, if the scratch directory is encrypted? Then we should allow the access.

This bug is to fix that.