hive-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hive QA (JIRA)" <>
Subject [jira] [Commented] (HIVE-17544) Provide classname info for function authorization
Date Mon, 02 Oct 2017 21:42:00 GMT


Hive QA commented on HIVE-17544:

Here are the results of testing the latest attachment:

{color:red}ERROR:{color} -1 due to no test(s) being added or modified.

{color:red}ERROR:{color} -1 due to 7 failed/errored test(s), 11193 tests executed
*Failed tests:*
org.apache.hadoop.hive.cli.TestMiniLlapLocalCliDriver.testCliDriver[optimize_nullscan] (batchId=162)
org.apache.hadoop.hive.cli.TestMiniLlapLocalCliDriver.testCliDriver[union_fast_stats] (batchId=157)
org.apache.hadoop.hive.cli.TestTezPerfCliDriver.testCliDriver[query14] (batchId=240)
org.apache.hadoop.hive.cli.control.TestDanglingQOuts.checkDanglingQOut (batchId=203)

Test results:
Console output:
Test logs:

Executing org.apache.hive.ptest.execution.TestCheckPhase
Executing org.apache.hive.ptest.execution.PrepPhase
Executing org.apache.hive.ptest.execution.ExecutionPhase
Executing org.apache.hive.ptest.execution.ReportingPhase
Tests exited with: TestsFailedException: 7 tests failed

This message is automatically generated.

ATTACHMENT ID: 12890005 - PreCommit-HIVE-Build

> Provide classname info for function authorization
> -------------------------------------------------
>                 Key: HIVE-17544
>                 URL:
>             Project: Hive
>          Issue Type: Task
>          Components: Authorization
>    Affects Versions: 2.1.1
>            Reporter: Na Li
>            Assignee: Aihua Xu
>            Priority: Critical
>         Attachments: HIVE-17544.1.patch, HIVE-17544.2.patch, HIVE-17544.3.patch
> Right now, for authorization 2, the HiveAuthorizationValidator.checkPrivileges(HiveOperationType
var1, List<HivePrivilegeObject> var2, List<HivePrivilegeObject> var3, HiveAuthzContext
var4) does not contain the parsed sql command string as input. Therefore, Sentry has to parse
the command again.
> The API should be changed to include all required information as input, so Sentry does
not need to parse the sql command string again.
> known situations:
> 1) when dropping a database which does not exist, hive should not call sentry or it calls
sentry with database name as input
> 2) when creating function, hive should provide UDF class name as input.
> 3) When dropping function, hive should provide UDF class name as input.
> 4) When dropping a table which does not exist, hive should not call sentry or it calls
sentry with database name and table name as input.
> 5) In any situation that the command should succeeds and hive does not provide required
info to sentry, hive should not call sentry at all because sentry will throw exception when
required info is not available from input.

This message was sent by Atlassian JIRA

View raw message