[ 
https://issues.apache.org/jira/browse/HIVE-5837?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13850885#comment-13850885
 ] 

Thejas M Nair commented on HIVE-5837:
-------------------------------------

[~brocknoland] I assume you mean URI and SERVER as objects  (similar to table, 
views etc) on which privileges (eg, select , insert,..) can be granted. As you 
know, URI authorization is very essential (more than just helping with udf 
support), without that you cannot enforce access control (you can use 'create 
table' to read from any hdfs location). 
I see that SERVER object will also be useful, but not essential for a first 
version. Should we make one of the sql standard privileges available on SERVER 
object ?


> SQL standard based secure authorization for hive
> ------------------------------------------------
>
>                 Key: HIVE-5837
>                 URL: https://issues.apache.org/jira/browse/HIVE-5837
>             Project: Hive
>          Issue Type: New Feature
>          Components: Authorization
>            Reporter: Thejas M Nair
>            Assignee: Thejas M Nair
>         Attachments: SQL standard authorization hive.pdf
>
>
> The current default authorization is incomplete and not secure. The 
> alternative of storage based authorization provides security but does not 
> provide fine grained authorization.
> The proposal is to support secure fine grained authorization in hive using 
> SQL standard based authorization model.



--
This message was sent by Atlassian JIRA
(v6.1.4#6159)

Reply via email to