[RANGER-577] Hive Plugin - Ranger should not change hive config if authorization is disabled

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.5.0
• Component/s: plugins
• Assignee: Madhan Neethiraj
• Reporter: Velmurugan Periasamy
• Created: 20/Jul/15 19:12
• Updated: 20/Jul/15 19:12

Description

Hive loads the authorizer and calls it's applyAuthorizationConfigPolicy function even if authorization is disabled. This was done for sql standard authorization, so that even from hive-cli (where authorization is disabled), new tables that get created have the correct permissions.

It would be good to have Ranger also behave same way as SQL Std auth, this can be done by not calling SettableConfigUpdater.setHiveConfWhiteList and not adding other restrictions from its HiveAuthorizer.applyAuthorizationConfigPolicy implementation.