You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hive.apache.org by "Chengbing Liu (JIRA)" <ji...@apache.org> on 2015/09/22 03:31:04 UTC
[jira] [Updated] (HIVE-11901) StorageBasedAuthorizationProvider
requires write permission on table for SELECT statements
[ https://issues.apache.org/jira/browse/HIVE-11901?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Chengbing Liu updated HIVE-11901:
---------------------------------
Attachment: HIVE-11901.01.patch
Please have a look at the patch, thanks!
> StorageBasedAuthorizationProvider requires write permission on table for SELECT statements
> ------------------------------------------------------------------------------------------
>
> Key: HIVE-11901
> URL: https://issues.apache.org/jira/browse/HIVE-11901
> Project: Hive
> Issue Type: Bug
> Components: Authorization
> Affects Versions: 1.2.1
> Reporter: Chengbing Liu
> Assignee: Chengbing Liu
> Attachments: HIVE-11901.01.patch
>
>
> With HIVE-7895, it will require write permission on the table directory even for a SELECT statement.
> Looking at the stacktrace, it seems the method {{StorageBasedAuthorizationProvider#authorize(Table table, Partition part, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv)}} always treats a null partition as a CREATE statement, which can also be a SELECT.
> We may have to check {{readRequiredPriv}} and {{writeRequiredPriv}} first in order to tell which statement it is.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)