[ https://issues.apache.org/jira/browse/HIVE-7033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13994102#comment-13994102 ]
Ashutosh Chauhan commented on HIVE-7033: ---------------------------------------- Left a comment on RB. Check of role name existence should be done within transaction to avoid TOCTOU bug. > grant statements should check if the role exists > ------------------------------------------------ > > Key: HIVE-7033 > URL: https://issues.apache.org/jira/browse/HIVE-7033 > Project: Hive > Issue Type: Bug > Components: Authorization, SQLStandardAuthorization > Affects Versions: 0.13.0 > Reporter: Thejas M Nair > Assignee: Thejas M Nair > Attachments: HIVE-7033.1.patch, HIVE-7033.2.patch > > > The following grant statement that grants to a role that does not exist > succeeds, but it should result in an error. > > grant all on t1 to role nosuchrole; -- This message was sent by Atlassian JIRA (v6.2#6252)