Bulk Operation

HIVE-5837 Revoke privilege should support revoking of grant option

HIVE-5837 sql std auth - show grant statement for all principals throws NPE

HIVE-5837 "show grant ... on all" fails with NPE

HIVE-5837 SQL std auth - pass username from hiveserver2 to sessionstate

HIVE-5837 SQL std auth - only db owner should be allowed to create table within a db

HIVE-5837 sql std auth - add command to change owner of database

HIVE-5837 Restrict function create/drop to admin roles

HIVE-5837 SQL std auth - allow grant/revoke roles if user has ADMIN OPTION

HIVE-5837 SQL std auth - revert change for view keyword in grant statement

HIVE-5837 sql std auth - new users in admin role config should get added

HIVE-5837 Disallow transform clause in sql std authorization mode

HIVE-5837 Test authorization_revoke_table_priv.q is failing on trunk

HIVE-5837 sql std auth - database should have an owner

HIVE-5837 sql std auth - revoke privileges api in metastore should check grantor user

HIVE-5837 sql std auth - document configuration necessary for security

HIVE-5837 sql std auth - pass username from sessionstate to v2 authorization interface

HIVE-5837 sql std auth - disallow cycles between roles

HIVE-5837 sql standard auth - use admin option specified in grant/revoke role statement

HIVE-5837 sql std auth - revoke role should support sql standard syntax for admin option

HIVE-5837 sql std auth - support 'with admin option' in revoke role metastore api

HIVE-5837 sql std auth - view authorization should not underlying table. More tests and fixes.

HIVE-5837 sql std auth - authorize 'show roles'

HIVE-5837 support grant/revoke on views - parser changes

HIVE-5837 SQL std auth - make role/user optional in grant/revoke statements

HIVE-5837 SQL std auth - support new privileges INSERT, DELETE

HIVE-5837 SQL std auth - support granted-by in grant statements

HIVE-5837 SQL std auth - authorize create database

HIVE-5837 SQL std auth - special handling of PUBLIC role

HIVE-5837 SQL std auth - bootstrap SUPERUSER roles

HIVE-5837 SQL std auth - authorize statements that work with paths

HIVE-5837 SQL std auth - metastore api support for get_privilege_set api that checks specific role

HIVE-5837 SQL std auth - get_privilege_set should check role hierarchy

HIVE-5837 SQL std auth - authorize grant/revoke on table

HIVE-5837 SQL std auth - authorize grant/revoke roles

HIVE-5837 SQL std auth - authorize show all roles, create role, drop role

HIVE-5837 SQL std auth - authorize DESCRIBE ROLE role

HIVE-5837 SQL std auth - support DESCRIBE ROLE

HIVE-5837 SQL std auth - support 'show roles'

HIVE-5837 SQL std auth - support,authorize new 'show grant..' statements

HIVE-5837 SQL std auth - add support to metastore api to list all privileges for a user

HIVE-5837 SQL std auth - add list_all_roles to metastore api

HIVE-5837 SQL std auth - add metastore get_principals_in_role api, support SHOW PRINCIPALS role_name

HIVE-5837 SQL std auth - implement set roles, show current roles

HIVE-5837 SQL std auth - Access control statement updates

HIVE-5837 Add a hive authorization plugin api that does not assume privileges needed

HIVE-5837 SQL std auth - parser changes

HIVE-5837 sql standard auth should disable commands that impose security risk