hive-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ferdinand Xu (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HIVE-11179) HIVE should allow custom converting from HivePrivilegeObjectDesc to privilegeObject for different authorizers
Date Thu, 09 Jul 2015 07:23:04 GMT

    [ https://issues.apache.org/jira/browse/HIVE-11179?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14620034#comment-14620034
] 

Ferdinand Xu commented on HIVE-11179:
-------------------------------------

Hi [~leftylev], I don't think this JIRA needs extra documentation. It just improve the expandability
of the API. Thank you!

> HIVE should allow custom converting from HivePrivilegeObjectDesc to privilegeObject for
different authorizers
> -------------------------------------------------------------------------------------------------------------
>
>                 Key: HIVE-11179
>                 URL: https://issues.apache.org/jira/browse/HIVE-11179
>             Project: Hive
>          Issue Type: Improvement
>            Reporter: Dapeng Sun
>            Assignee: Dapeng Sun
>              Labels: Authorization
>             Fix For: 1.3.0, 2.0.0
>
>         Attachments: HIVE-11179.001.patch, HIVE-11179.001.patch
>
>
> HIVE should allow custom converting from HivePrivilegeObjectDesc to privilegeObject for
different authorizers:
> There is a case in Apache Sentry: Sentry support uri and server level privilege, but
in hive side, it uses {{AuthorizationUtils.getHivePrivilegeObject(privSubjectDesc)}} to do
the converting, and the code in {{getHivePrivilegeObject()}} only handle the scenes for table
and database 
> {noformat}
> privSubjectDesc.getTable() ? HivePrivilegeObjectType.TABLE_OR_VIEW :
>         HivePrivilegeObjectType.DATABASE;
> {noformat}
> A solution is move this method to {{HiveAuthorizer}}, so that a custom Authorizer could
enhance it.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message