You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ranger.apache.org by rm...@apache.org on 2020/09/30 19:40:40 UTC
[ranger] branch master updated: RANGER-3017:RangerHiveAuthorizer
should authorize URL in Hive tempUDFs operation
This is an automated email from the ASF dual-hosted git repository.
rmani pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ranger.git
The following commit(s) were added to refs/heads/master by this push:
new 71e1dd4 RANGER-3017:RangerHiveAuthorizer should authorize URL in Hive tempUDFs operation
71e1dd4 is described below
commit 71e1dd40366c8eb8e9c498b0b5158d85d603af02
Author: Ramesh Mani <rm...@cloudera.com>
AuthorDate: Tue Sep 29 17:22:25 2020 -0700
RANGER-3017:RangerHiveAuthorizer should authorize URL in Hive tempUDFs operation
---
.../authorization/hive/authorizer/RangerHiveAuthorizer.java | 10 +++++-----
1 file changed, 5 insertions(+), 5 deletions(-)
diff --git a/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java b/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
index d2b7807..1bec50b 100644
--- a/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
+++ b/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
@@ -1841,6 +1841,9 @@ public class RangerHiveAuthorizer extends RangerHiveAuthorizerBase {
case CREATEDATABASE:
case CREATETABLE:
case CREATETABLE_AS_SELECT:
+ case CREATEFUNCTION:
+ case DROPFUNCTION:
+ case RELOADFUNCTION:
case ALTERDATABASE:
case ALTERDATABASE_LOCATION:
case ALTERDATABASE_OWNER:
@@ -1882,6 +1885,8 @@ public class RangerHiveAuthorizer extends RangerHiveAuthorizerBase {
case ALTERPARTITION_MERGEFILES:
case ALTERTBLPART_SKEWED_LOCATION:
case ALTERTABLE_OWNER:
+ case ADD:
+ case DELETE:
case QUERY:
ret = FsAction.ALL;
break;
@@ -1910,9 +1915,6 @@ public class RangerHiveAuthorizer extends RangerHiveAuthorizerBase {
case SHOWPARTITIONS:
case SHOWLOCKS:
case SHOWCONF:
- case CREATEFUNCTION:
- case DROPFUNCTION:
- case RELOADFUNCTION:
case CREATEMACRO:
case DROPMACRO:
case CREATEVIEW:
@@ -1946,8 +1948,6 @@ public class RangerHiveAuthorizer extends RangerHiveAuthorizerBase {
case SET:
case RESET:
case DFS:
- case ADD:
- case DELETE:
case COMPILE:
case START_TRANSACTION:
case COMMIT: