[
https://issues.apache.org/jira/browse/HIVE-5928?focusedWorklogId=15737&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-15737
]
Thejas M Nair logged work on HIVE-5928:
---------------------------------------
Author: Thejas M Nair
Created on: 27/Jan/14 23:29
Start Date: 27/Jan/14 23:29
Worklog Time Spent: 4h
Issue Time Tracking
-------------------
Worklog Id: (was: 15737)
Time Spent: 6h (was: 2h)
Remaining Estimate: 0h (was: 12h)
> Add a hive authorization plugin api that does not assume privileges needed
> --------------------------------------------------------------------------
>
> Key: HIVE-5928
> URL: https://issues.apache.org/jira/browse/HIVE-5928
> Project: Hive
> Issue Type: Sub-task
> Components: Authorization
> Reporter: Thejas M Nair
> Assignee: Thejas M Nair
> Fix For: 0.13.0
>
> Attachments: HIVE-5928.1.patch, HIVE-5928.2.patch,
> hive_auth_class_preview.txt
>
> Original Estimate: 120h
> Time Spent: 6h
> Remaining Estimate: 0h
>
> The existing HiveAuthorizationProvider interface implementations can be used
> to support custom authorization models.
> But this interface limits the customization for these reasons -
> 1. It has assumptions about the privileges required for an action.
> 2. It does have not functions that you can implement for having custom ways
> of doing the actions of access control statements.
> This jira proposes a new interface HiveAuthorizer that does not make
> assumptions of the privileges required for the actions. The authorize()
> functions will be equivalent of authorize(<operation type>, <input objects>,
> <output objects>). It will also have functions that will be called from the
> access control statements.
> The current HiveAuthorizationProvider will continue to be supported for
> backward compatibility.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
