You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hive.apache.org by "Aihua Xu (JIRA)" <ji...@apache.org> on 2017/09/22 21:09:02 UTC

[jira] [Commented] (HIVE-17544) Add Parsed Tree as input for Authorization

    [ https://issues.apache.org/jira/browse/HIVE-17544?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16177125#comment-16177125 ] 

Aihua Xu commented on HIVE-17544:
---------------------------------

Hive already puts the input and output info in the objects of List<HivePrivilegeObject>, e.g, for "create table t1(x int)", there is no input, but the output will be t1. 

> Add Parsed Tree as input for Authorization
> ------------------------------------------
>
>                 Key: HIVE-17544
>                 URL: https://issues.apache.org/jira/browse/HIVE-17544
>             Project: Hive
>          Issue Type: Task
>          Components: Authorization
>    Affects Versions: 2.1.1
>            Reporter: Na Li
>            Assignee: Aihua Xu
>            Priority: Critical
>
> Right now, for authorization 2, the HiveAuthorizationValidator.checkPrivileges(HiveOperationType var1, List<HivePrivilegeObject> var2, List<HivePrivilegeObject> var3, HiveAuthzContext var4) does not contain the parsed sql command string as input. Therefore, Sentry has to parse the command again.
> The API should be changed to include the parsed result as input, so Sentry does not need to parse the sql command string again.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)