[PIG-4080] Add Preprocessor commands and more to the black/whitelisting feature

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.14.0, 0.13.1
• Fix Version/s: 0.14.0
• Patch Info: Patch Available
• Hadoop Flags: Reviewed
• Assignee: Prashant Kommireddi
• Reporter: Prashant Kommireddi
• Created: 29/Jul/14 04:43
• Updated: 21/Nov/14 05:58
• Resolved: 25/Sep/14 21:39

Description

Executing Pig scripts in a multi-tenant environment within the context of the app server requires disabling certain other commands that could be dangerous. For eg, the shell commands contained within the pig script will be executed as the user (possibly superuser) on the app server. The following is an example

%declare X `id`;

An admin might want to disable certain features, such as either disabling "shell" entirely or even being extra cautious by disabling "declare". Some more commands that could be disabled are - default, define (dynamic invokers), run and exec.