hive-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ashutosh Chauhan (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HIVE-5253) Create component to compile and jar dynamic code
Date Mon, 30 Sep 2013 20:01:25 GMT

    [ https://issues.apache.org/jira/browse/HIVE-5253?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13782159#comment-13782159
] 

Ashutosh Chauhan commented on HIVE-5253:
----------------------------------------

I have one concern with this work: Security. This will open up another way of doing code injection
in hive script. We already have to deal with this via udfs, transform scripts etc. This is
adding one more. [~appodictic] Do you have any recommendation on how security for such script
will be dealt with? [~brocknoland] I assume you also worked a bit on Sentry. This will present
a problem there also. Will it? cc: [~shreepadma] [~prasadm]

> Create component to compile and jar dynamic code
> ------------------------------------------------
>
>                 Key: HIVE-5253
>                 URL: https://issues.apache.org/jira/browse/HIVE-5253
>             Project: Hive
>          Issue Type: Sub-task
>            Reporter: Edward Capriolo
>            Assignee: Edward Capriolo
>         Attachments: HIVE-5253.10.patch.txt, HIVE-5253.1.patch.txt, HIVE-5253.3.patch.txt,
HIVE-5253.3.patch.txt, HIVE-5253.3.patch.txt, HIVE-5253.8.patch.txt, HIVE-5253.9.patch.txt,
HIVE-5253.patch.txt
>
>




--
This message was sent by Atlassian JIRA
(v6.1#6144)

Mime
View raw message