-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35582/
-----------------------------------------------------------
Review request for hive, Chao Sun, Szehon Ho, and Xuefu Zhang.
Bugs: HIVE-11029
https://issues.apache.org/jira/browse/HIVE-11029
Repository: hive-git
Description
-------
Currently Hive session UGI uses createRemoteUser API instead of createProxyUser
API in the unsecured mode. That way, the impersonated user is not passed to the
jobtracker/Resourcemanager. This caused the hadoop.proxyuser.mapr.groups does
not work to restrict the groups that can be impersonated. Any impersonated user
can launch a mapreduce job.
The fix is replacing the createRemoteUser API by createProxyUser API.
Diffs
-----
service/src/java/org/apache/hive/service/cli/session/HiveSessionImplwithUGI.java
56af643
Diff: https://reviews.apache.org/r/35582/diff/
Testing
-------
Thanks,
Na Yang
