[jira] [Created] (TRAFODION-2435) Any user can perform TRUNCATE on native Hive tables.

["Roberta Marton (JIRA)" <ji...@apache.org>]

Roberta Marton created TRAFODION-2435:
-----------------------------------------

             Summary: Any user can perform TRUNCATE on native Hive tables.
                 Key: TRAFODION-2435
                 URL: https://issues.apache.org/jira/browse/TRAFODION-2435
             Project: Apache Trafodion
          Issue Type: Bug
          Components: sql-security
            Reporter: Roberta Marton
            Assignee: Roberta Marton


SQL>--expect ERROR[4481]
SQL>select * from hive.qa_db.qa_tab;

*** ERROR[4481] The user does not have SELECT privilege on table or view HIVE.QA_DB.QA_TAB. [2017-01-10 07:38:30]

SQL>--expect 1 row inserted
SQL>insert into hive.qa_db.qa_tab values('sqlqaa',1);

--- 1 row(s) inserted.

SQL>-- expect ERROR[4223]
SQL>delete from hive.qa_db.qa_tab;

*** ERROR[4223] Update/Delete on Hive table is not supported in this software version. [2017-01-10 07:39:26]

SQL>expect ERROR[3242]
SQL>purgedata hive.qa_db.qa_tab;

*** ERROR[3242] This statement is not supported. Reason: Purgedata is not allowed for hive tables. Use Truncate command. [2017-01-10 07:39:33]

SQL> --expect ERROR[4481]
SQL>truncate hive.qa_db.qa_tab;

--- SQL operation complete.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)