Uploaded image for project: 'Sentry'
  1. Sentry
  2. SENTRY-1231

Sentry doesn't secure index location uri, when do "CREATE INDEX LOCATION ''/uri"

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: 1.8.0
    • Fix Version/s: 2.0.0
    • Component/s: Sentry
    • Labels:
      None

      Description

      Sentry doesn't check the uri privilege of command, CREATE INDEX LOCATION '/path'. For example,

      [root@ay-s3-1 ~]# sudo -u hdfs hdfs dfs -getfacl -R /data/testindex
      # file: /data/testindex
      # owner: hdfs
      # group: hive
      user::rwx
      group::r-x
      other::r-x
      
      use systest> CREATE INDEX my_hdfs_table_index ON TABLE my_hdfs_table (viewtime) AS 'compact' WITH DEFERRED REBUILD LOCATION '/data/testindex';
      

        Attachments

        1. SENTRY-1231.4.patch
          7 kB
          Sergio Peña
        2. SENTRY-1231.3.patch
          7 kB
          Sergio Peña
        3. SENTRY-1231.1.patch
          7 kB
          Sravya Tirukkovalur
        4. SENTRY-1231.0.patch
          5 kB
          Sravya Tirukkovalur

          Issue Links

            Activity

              People

              • Assignee:
                spena Sergio Peña
                Reporter:
                anneyu Anne Yu
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: