[ 
https://issues.apache.org/jira/browse/HIVE-3009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13671826#comment-13671826
 ] 

Vandana Ayyalasomayajula commented on HIVE-3009:
------------------------------------------------

[~mantonov]-- Yes, you are right. I could not pursue the patch further. If you 
or someone is interested, they can work on the jira. 

                
> do authorization for all metadata operations
> --------------------------------------------
>
>                 Key: HIVE-3009
>                 URL: https://issues.apache.org/jira/browse/HIVE-3009
>             Project: Hive
>          Issue Type: Bug
>          Components: Authorization, Metastore
>            Reporter: Thejas M Nair
>            Assignee: Vandana Ayyalasomayajula
>
> Most of the metadata read operations and some write operations are not 
> checking for authorization. 
> See org.apache.hadoop.hive.ql.plan.HiveOperation . Operations such as 
> DESCTABLE and DROPDATABASE have null for required privileges. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to