[jira] [Work logged] (HIVE-24876) Disable /longconf.jsp page on HS2 web UI for non admin users

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HIVE-24876?focusedWorklogId=577689&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-577689 ]

ASF GitHub Bot logged work on HIVE-24876:
-----------------------------------------

                Author: ASF GitHub Bot
            Created on: 06/Apr/21 15:32
            Start Date: 06/Apr/21 15:32
    Worklog Time Spent: 10m 
      Work Description: saihemanth-cloudera commented on a change in pull request #2063:
URL: https://github.com/apache/hive/pull/2063#discussion_r607957764



##########
File path: service/src/resources/hive-webapps/hiveserver2/logconf.jsp
##########
@@ -112,7 +112,9 @@
                     </tbody>
                 </table>
             </div>
-
+            <% Collection<HiveSession> hiveSessions = sessionManager.getSessions();

Review comment:
       This HS2 WebUI log interface is common to all the sessions currently. Our goal now is that the log level should only be configured by the users with admin-level privileges. So only the users with admin-level privileges will be seeing this log configuration input.




-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Issue Time Tracking
-------------------

    Worklog Id:     (was: 577689)
    Time Spent: 40m  (was: 0.5h)

> Disable /longconf.jsp page on HS2 web UI for non admin users
> ------------------------------------------------------------
>
>                 Key: HIVE-24876
>                 URL: https://issues.apache.org/jira/browse/HIVE-24876
>             Project: Hive
>          Issue Type: Bug
>          Components: HiveServer2
>    Affects Versions: 4.0.0
>            Reporter: Sai Hemanth Gantasala
>            Assignee: Sai Hemanth Gantasala
>            Priority: Major
>              Labels: pull-request-available
>          Time Spent: 40m
>  Remaining Estimate: 0h
>
> /logconf.jsp page should be disabled to the users that are not in admin roles. Otherwise, any user can flood the log files with different log levels that can be configured on HS2 web UI.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)