hive-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dapeng Sun (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HIVE-11179) HIVE should allow custom converting from HivePrivilegeObjectDesc to privilegeObject for different authorizers
Date Fri, 03 Jul 2015 05:50:04 GMT
Dapeng Sun created HIVE-11179:
---------------------------------

             Summary: HIVE should allow custom converting from HivePrivilegeObjectDesc to
privilegeObject for different authorizers
                 Key: HIVE-11179
                 URL: https://issues.apache.org/jira/browse/HIVE-11179
             Project: Hive
          Issue Type: Improvement
            Reporter: Dapeng Sun
            Assignee: Dapeng Sun


HIVE should allow custom converting from HivePrivilegeObjectDesc to privilegeObject for different
authorizers:

There is a case in Apache Sentry: Sentry support uri and server level privilege, but in hive
side, it uses {{AuthorizationUtils.getHivePrivilegeObject(privSubjectDesc)}} to do the converting,
and the code in {{getHivePrivilegeObject()}} only handle the scenes for table and database

{noformat}
privSubjectDesc.getTable() ? HivePrivilegeObjectType.TABLE_OR_VIEW :
        HivePrivilegeObjectType.DATABASE;
{noformat}

A solution is move this method to {{HiveAuthorizer}}, so that a custom Authorizer could enhance
it.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message