Return-Path: X-Original-To: apmail-hive-dev-archive@www.apache.org Delivered-To: apmail-hive-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id BC7FB1035E for ; Mon, 18 Nov 2013 22:49:24 +0000 (UTC) Received: (qmail 8319 invoked by uid 500); 18 Nov 2013 22:49:24 -0000 Delivered-To: apmail-hive-dev-archive@hive.apache.org Received: (qmail 8255 invoked by uid 500); 18 Nov 2013 22:49:24 -0000 Mailing-List: contact dev-help@hive.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@hive.apache.org Delivered-To: mailing list dev@hive.apache.org Received: (qmail 8202 invoked by uid 500); 18 Nov 2013 22:49:23 -0000 Delivered-To: apmail-hadoop-hive-dev@hadoop.apache.org Received: (qmail 8188 invoked by uid 99); 18 Nov 2013 22:49:23 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 18 Nov 2013 22:49:23 +0000 Date: Mon, 18 Nov 2013 22:49:23 +0000 (UTC) From: "Thejas M Nair (JIRA)" To: hive-dev@hadoop.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (HIVE-5400) Allow admins to disable compile and other commands MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HIVE-5400?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13825887#comment-13825887 ] Thejas M Nair commented on HIVE-5400: ------------------------------------- [~lefty@hortonworks.com] Yes, that section sounds good. It belongs to the subsection "Hive Client Security". Thanks for updating the docs! > Allow admins to disable compile and other commands > -------------------------------------------------- > > Key: HIVE-5400 > URL: https://issues.apache.org/jira/browse/HIVE-5400 > Project: Hive > Issue Type: Sub-task > Reporter: Brock Noland > Assignee: Brock Noland > Fix For: 0.13.0 > > Attachments: HIVE-5400.patch, HIVE-5400.patch, HIVE-5400.patch > > > From here: https://issues.apache.org/jira/browse/HIVE-5253?focusedCommentId=13782220&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-13782220 > I think we should afford admins who want to disable this functionality the ability to do so. Since such admins might want to disable other commands such as add or dfs, it wouldn't be much trouble to allow them to do this as well. For example we could have a configuration option "hive.available.commands" (or similar) which specified add,set,delete,reset, etc by default. Then check this value in CommandProcessorFactory. It would probably make sense to add this property to the restrict list. -- This message was sent by Atlassian JIRA (v6.1#6144)