Fang-Yu Rao created HIVE-27125:
----------------------------------

             Summary: Hive reveals the non-existence of a table to unauthorized 
users
                 Key: HIVE-27125
                 URL: https://issues.apache.org/jira/browse/HIVE-27125
             Project: Hive
          Issue Type: Improvement
          Components: HiveServer2
            Reporter: Fang-Yu Rao


Hive reveals the non-existence of a table to unauthorized users.

Specifically, if an unauthorized user tries to access a non-existing table, 
HiveServer2 reveals to the requesting user that the table does not exist. This 
is because currently HiveAccessControlException does not take precedence over 
SemanticException in 
[Compiler#compile()|https://github.com/apache/hive/blob/master/ql/src/java/org/apache/hadoop/hive/ql/Compiler.java#L95],
 where HS2 compiles the given query.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to