[jira] [Commented] (HIVE-5959) SQL std auth - bootstrap SUPERUSER roles

["Lefty Leverenz (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HIVE-5959?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13887321#comment-13887321 ] 

Lefty Leverenz commented on HIVE-5959:
--------------------------------------

This adds *hive.users.in.admin.role* to HiveConf.java & hive-default.xml.template, so I'll put it in the wiki with a release note.  But some explanation is also needed in the Authorization wiki, and perhaps a mention in Configuration.  Should that be done now, or wait for the umbrella jira (HIVE-5837)?

Quick ref:

* [HIVE-5837:  SQL standard based secure authorization for hive |https://issues.apache.org/jira/browse/HIVE-5837]
* [Configuration Properties:  Authentication/Authorization |https://cwiki.apache.org/confluence/display/Hive/Configuration+Properties#ConfigurationProperties-Authentication/Authorization]
* [Hive Authorization |https://cwiki.apache.org/confluence/display/Hive/LanguageManual+Authorization]
* [AdminManual Configuration |https://cwiki.apache.org/confluence/display/Hive/AdminManual+Configuration]
** [Configuring Hive |https://cwiki.apache.org/confluence/display/Hive/AdminManual+Configuration#AdminManualConfiguration-ConfiguringHive]
** [Configuration Variables |https://cwiki.apache.org/confluence/display/Hive/AdminManual+Configuration#AdminManualConfiguration-ConfigurationVariables]

> SQL std auth - bootstrap SUPERUSER roles
> ----------------------------------------
>
>                 Key: HIVE-5959
>                 URL: https://issues.apache.org/jira/browse/HIVE-5959
>             Project: Hive
>          Issue Type: Sub-task
>          Components: Authorization
>            Reporter: Thejas M Nair
>            Assignee: Ashutosh Chauhan
>             Fix For: 0.13.0
>
>         Attachments: HIVE-5959.2.patch, HIVE-5959.3.patch, HIVE-5959.5.patch, HIVE-5959.6.patch, HIVE-5959.7.patch, HIVE-5959.patch
>
>   Original Estimate: 72h
>  Remaining Estimate: 72h
>
> SUPERUSER and PUBLIC are two roles that are always present, these need to be added automatically on metastore startup. This would be similar to creation of the "default" database from HMSHandler.init().
> A config param in hive-site.xml will be used to specify the list of users who belong to the SUPERUSER role.
>  



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)