hive-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Thejas M Nair (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HIVE-5400) Allow admins to disable compile and other commands
Date Wed, 13 Nov 2013 21:33:20 GMT

     [ https://issues.apache.org/jira/browse/HIVE-5400?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Thejas M Nair updated HIVE-5400:
--------------------------------

    Release Note: 
Introduces new hive config parameter -
hive.security.command.whitelist .
This can use used to restrict the set of commands that can be run. Currently supported command
list is -  "set,reset,dfs,add,delete" and by default all these commands are supported. If
you want to restrict any of these commands, you can set the config to a value that does not
have the command in it.


Adding documentation in release notes. cc [~lefty@hortonworks.com]


> Allow admins to disable compile and other commands
> --------------------------------------------------
>
>                 Key: HIVE-5400
>                 URL: https://issues.apache.org/jira/browse/HIVE-5400
>             Project: Hive
>          Issue Type: Sub-task
>            Reporter: Brock Noland
>            Assignee: Brock Noland
>             Fix For: 0.13.0
>
>         Attachments: HIVE-5400.patch, HIVE-5400.patch, HIVE-5400.patch
>
>
> From here: https://issues.apache.org/jira/browse/HIVE-5253?focusedCommentId=13782220&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-13782220
>  I think we should afford admins who want to disable this functionality the ability to
do so. Since such admins might want to disable other commands such as add or dfs, it wouldn't
be much trouble to allow them to do this as well. For example we could have a configuration
option "hive.available.commands" (or similar) which specified add,set,delete,reset, etc by
default. Then check this value in CommandProcessorFactory. It would probably make sense to
add this property to the restrict list.



--
This message was sent by Atlassian JIRA
(v6.1#6144)

Mime
View raw message