Return-Path: X-Original-To: apmail-hive-dev-archive@www.apache.org Delivered-To: apmail-hive-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 92F2ED92F for ; Wed, 15 Aug 2012 23:40:39 +0000 (UTC) Received: (qmail 24957 invoked by uid 500); 15 Aug 2012 23:40:39 -0000 Delivered-To: apmail-hive-dev-archive@hive.apache.org Received: (qmail 24768 invoked by uid 500); 15 Aug 2012 23:40:38 -0000 Mailing-List: contact dev-help@hive.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@hive.apache.org Delivered-To: mailing list dev@hive.apache.org Received: (qmail 24651 invoked by uid 500); 15 Aug 2012 23:40:38 -0000 Delivered-To: apmail-hadoop-hive-dev@hadoop.apache.org Received: (qmail 24597 invoked by uid 99); 15 Aug 2012 23:40:38 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 15 Aug 2012 23:40:38 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id 1A0032C5BE8 for ; Wed, 15 Aug 2012 23:40:38 +0000 (UTC) Date: Thu, 16 Aug 2012 10:40:38 +1100 (NCT) From: "Vandana Ayyalasomayajula (JIRA)" To: hive-dev@hadoop.apache.org Message-ID: <619188172.16834.1345074038107.JavaMail.jiratomcat@arcas> In-Reply-To: <1519786194.39869.1336499516403.JavaMail.tomcat@hel.zones.apache.org> Subject: [jira] [Commented] (HIVE-3009) do authorization for all metadata operations MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HIVE-3009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13435621#comment-13435621 ] Vandana Ayyalasomayajula commented on HIVE-3009: ------------------------------------------------ @Carl: I am having problems making the build + tests run using ant. So I am just waiting to get them passed. Once I get that successfully done, I will mark the jira as patch available. > do authorization for all metadata operations > -------------------------------------------- > > Key: HIVE-3009 > URL: https://issues.apache.org/jira/browse/HIVE-3009 > Project: Hive > Issue Type: Bug > Components: Authorization, Metastore > Reporter: Thejas M Nair > Assignee: Vandana Ayyalasomayajula > > Most of the metadata read operations and some write operations are not checking for authorization. > See org.apache.hadoop.hive.ql.plan.HiveOperation . Operations such as DESCTABLE and DROPDATABASE have null for required privileges. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira