Critical Description
Hive command RELOAD FUNCTION failing in Ranger HiveAuthorization. This is due to the check that was put in https://issues.apache.org/jira/browse/RANGER-3368.
To overcome this we need to have the previous behavior for RELOAD FUNCTION which is not to authorized in Ranger. If there are authorization that needs to be done in future, we can revisit Ranger HiveAuthorizer for enabling the correct permission for this command and more over this doesn't possess any security issue by not authorizing.
Command description from HIVE:
creating permanent functions in one Hive CLI session may not be reflected in HiveServer2 or other Hive CLI sessions, if they were started before the function was created. Issuing RELOAD FUNCTIONS within a HiveServer2 or HiveCLI session will allow it to pick up any changes to the permanent functions that may have been done by a different HiveCLI session. Due to backward compatibility reasons RELOAD FUNCTION; is also accepted.
Attachments
Issue Links
- links to
