[ 
https://issues.apache.org/jira/browse/HIVE-14099?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Thejas M Nair updated HIVE-14099:
---------------------------------
    Description: 
In case we enables :

hive.security.authorization.enabled=true in hive-site.xml

this setting can be disabled by users at their hive prompt. There should be 
hardcoded setting in the configs.

The other thing is once we enable authorization, the tables that got created 
before enabling looses access as they don't have authorization defined. How 
this situation can be tackled in hive.

Note that this issue does not affect SQL standard or ranger authorization 
plugin.

  was:
In case we enables :

hive.security.authorization.enabled=true in hive-site.xml

this setting can be disabled by users at their hive prompt. There should be 
hardcoded setting in the configs.

The other thing is once we enable authorization, the tables that got created 
before enabling looses access as they don't have authorization defined. How 
this situation can be tackled in hive.


> Hive security authorization can be disabled by users
> ----------------------------------------------------
>
>                 Key: HIVE-14099
>                 URL: https://issues.apache.org/jira/browse/HIVE-14099
>             Project: Hive
>          Issue Type: Improvement
>          Components: Authorization
>    Affects Versions: 0.13.1
>            Reporter: Prashant Kumar Singh
>            Assignee: Aihua Xu
>             Fix For: 2.2.0
>
>         Attachments: HIVE-14099.1.patch
>
>
> In case we enables :
> hive.security.authorization.enabled=true in hive-site.xml
> this setting can be disabled by users at their hive prompt. There should be 
> hardcoded setting in the configs.
> The other thing is once we enable authorization, the tables that got created 
> before enabling looses access as they don't have authorization defined. How 
> this situation can be tackled in hive.
> Note that this issue does not affect SQL standard or ranger authorization 
> plugin.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to