[ 
https://issues.apache.org/jira/browse/HIVE-5928?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13873165#comment-13873165
 ] 

Hive QA commented on HIVE-5928:
-------------------------------



{color:green}Overall{color}: +1 all checks pass

Here are the results of testing the latest attachment:
https://issues.apache.org/jira/secure/attachment/12623259/HIVE-5928.2.patch

{color:green}SUCCESS:{color} +1 4929 tests passed

Test results: 
http://bigtop01.cloudera.org:8080/job/PreCommit-HIVE-Build/927/testReport
Console output: 
http://bigtop01.cloudera.org:8080/job/PreCommit-HIVE-Build/927/console

Messages:
{noformat}
Executing org.apache.hive.ptest.execution.PrepPhase
Executing org.apache.hive.ptest.execution.ExecutionPhase
Executing org.apache.hive.ptest.execution.ReportingPhase
{noformat}

This message is automatically generated.

ATTACHMENT ID: 12623259

> Add a hive authorization plugin api that does not assume privileges needed
> --------------------------------------------------------------------------
>
>                 Key: HIVE-5928
>                 URL: https://issues.apache.org/jira/browse/HIVE-5928
>             Project: Hive
>          Issue Type: Sub-task
>          Components: Authorization
>            Reporter: Thejas M Nair
>            Assignee: Thejas M Nair
>         Attachments: HIVE-5928.1.patch, HIVE-5928.2.patch, 
> hive_auth_class_preview.txt
>
>   Original Estimate: 120h
>          Time Spent: 2h
>  Remaining Estimate: 12h
>
> The existing HiveAuthorizationProvider interface implementations can be used 
> to support custom authorization models.
> But this interface limits the customization for these reasons -
> 1. It has assumptions about the privileges required for an action.
> 2. It does have not functions that you can implement for having custom ways 
> of doing the actions of access control statements.
> This jira proposes a new interface HiveAuthorizer that does not make 
> assumptions of the privileges required for the actions. The authorize() 
> functions will be equivalent of authorize(<operation type>, <input objects>, 
> <output objects>). It will also have functions that will be called from the 
> access control statements.
> The current HiveAuthorizationProvider will continue to be supported for 
> backward compatibility. 



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Reply via email to