Uploaded image for project: 'Sentry (Retired)'
  1. Sentry (Retired)
  2. SENTRY-1231

Sentry doesn't secure index location uri, when do "CREATE INDEX LOCATION ''/uri"

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Blocker
    • Resolution: Fixed
    • 1.8.0
    • 2.0.0
    • Sentry
    • None

    Description

      Sentry doesn't check the uri privilege of command, CREATE INDEX LOCATION '/path'. For example,

      [root@ay-s3-1 ~]# sudo -u hdfs hdfs dfs -getfacl -R /data/testindex
      # file: /data/testindex
      # owner: hdfs
      # group: hive
      user::rwx
      group::r-x
      other::r-x
      
      use systest> CREATE INDEX my_hdfs_table_index ON TABLE my_hdfs_table (viewtime) AS 'compact' WITH DEFERRED REBUILD LOCATION '/data/testindex';
      

      Attachments

        1. SENTRY-1231.4.patch
          7 kB
          Sergio Peña
        2. SENTRY-1231.3.patch
          7 kB
          Sergio Peña
        3. SENTRY-1231.1.patch
          7 kB
          Sravya Tirukkovalur
        4. SENTRY-1231.0.patch
          5 kB
          Sravya Tirukkovalur

        Issue Links

          Activity

            People

              spena Sergio Peña
              anneyu Anne Yu
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: