Return-Path: 
 <dev-return-75988-apmail-hive-dev-archive=hive.apache.org@hive.apache.org>
X-Original-To: apmail-hive-dev-archive@www.apache.org
Delivered-To: apmail-hive-dev-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 269A110656
	for <apmail-hive-dev-archive@www.apache.org>;
 Tue, 14 Jan 2014 23:19:29 +0000 (UTC)
Received: (qmail 15407 invoked by uid 500); 14 Jan 2014 23:19:26 -0000
Delivered-To: apmail-hive-dev-archive@hive.apache.org
Received: (qmail 15301 invoked by uid 500); 14 Jan 2014 23:19:25 -0000
Mailing-List: contact dev-help@hive.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:dev-help@hive.apache.org>
List-Unsubscribe: <mailto:dev-unsubscribe@hive.apache.org>
List-Post: <mailto:dev@hive.apache.org>
List-Id: <dev.hive.apache.org>
Reply-To: dev@hive.apache.org
Delivered-To: mailing list dev@hive.apache.org
Received: (qmail 15201 invoked by uid 500); 14 Jan 2014 23:19:24 -0000
Delivered-To: apmail-hadoop-hive-dev@hadoop.apache.org
Received: (qmail 15174 invoked by uid 99); 14 Jan 2014 23:19:24 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 14 Jan 2014 23:19:24 +0000
Date: Tue, 14 Jan 2014 23:19:24 +0000 (UTC)
From: "Thejas M Nair (JIRA)" <jira@apache.org>
To: hive-dev@hadoop.apache.org
Message-ID: <JIRA.12682516.1386104590561.1757.1389741564167@arcas>
In-Reply-To: <JIRA.12682516.1386104590561@arcas>
References: <JIRA.12682516.1386104590561@arcas>
Subject: [jira] [Work logged] (HIVE-5928) Add a hive authorization plugin
 api that does not assume privileges needed
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394


     [ https://issues.apache.org/jira/browse/HIVE-5928?focusedWorklogId=15634&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-15634 ]

Thejas M Nair logged work on HIVE-5928:
---------------------------------------

                Author: Thejas M Nair
            Created on: 14/Jan/14 23:18
            Start Date: 14/Jan/14 23:18
    Worklog Time Spent: 2h 

Issue Time Tracking
-------------------

            Worklog Id:     (was: 15634)
            Time Spent: 2h
    Remaining Estimate: 12h  (was: 120h)

> Add a hive authorization plugin api that does not assume privileges needed
> --------------------------------------------------------------------------
>
>                 Key: HIVE-5928
>                 URL: https://issues.apache.org/jira/browse/HIVE-5928
>             Project: Hive
>          Issue Type: Sub-task
>          Components: Authorization
>            Reporter: Thejas M Nair
>            Assignee: Thejas M Nair
>         Attachments: HIVE-5928.1.patch, hive_auth_class_preview.txt
>
>   Original Estimate: 120h
>          Time Spent: 2h
>  Remaining Estimate: 12h
>
> The existing HiveAuthorizationProvider interface implementations can be used to support custom authorization models.
> But this interface limits the customization for these reasons -
> 1. It has assumptions about the privileges required for an action.
> 2. It does have not functions that you can implement for having custom ways of doing the actions of access control statements.
> This jira proposes a new interface HiveAuthorizer that does not make assumptions of the privileges required for the actions. The authorize() functions will be equivalent of authorize(<operation type>, <input objects>, <output objects>). It will also have functions that will be called from the access control statements.
> The current HiveAuthorizationProvider will continue to be supported for backward compatibility. 



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)