[ https://issues.apache.org/jira/browse/HIVE-3009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13435621#comment-13435621 ]
Vandana Ayyalasomayajula commented on HIVE-3009: ------------------------------------------------ @Carl: I am having problems making the build + tests run using ant. So I am just waiting to get them passed. Once I get that successfully done, I will mark the jira as patch available. > do authorization for all metadata operations > -------------------------------------------- > > Key: HIVE-3009 > URL: https://issues.apache.org/jira/browse/HIVE-3009 > Project: Hive > Issue Type: Bug > Components: Authorization, Metastore > Reporter: Thejas M Nair > Assignee: Vandana Ayyalasomayajula > > Most of the metadata read operations and some write operations are not > checking for authorization. > See org.apache.hadoop.hive.ql.plan.HiveOperation . Operations such as > DESCTABLE and DROPDATABASE have null for required privileges. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira