[SENTRY-1231] Sentry doesn't secure index location uri, when do "CREATE INDEX LOCATION ''/uri"

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 1.8.0
• Fix Version/s: 2.0.0
• Component/s: Sentry
• Assignee: Sergio Peña
• Reporter: Anne Yu
• Created: 03/May/16 20:28
• Updated: 17/Oct/17 17:45
• Resolved: 17/Oct/17 17:45

Description

Sentry doesn't check the uri privilege of command, CREATE INDEX LOCATION '/path'. For example,

[root@ay-s3-1 ~]# sudo -u hdfs hdfs dfs -getfacl -R /data/testindex
# file: /data/testindex
# owner: hdfs
# group: hive
user::rwx
group::r-x
other::r-x

use systest> CREATE INDEX my_hdfs_table_index ON TABLE my_hdfs_table (viewtime) AS 'compact' WITH DEFERRED REBUILD LOCATION '/data/testindex';

Issue Links

• is duplicated by: SENTRY-1298 Create index location should require URI
• links to: Review Board