[jira] [Work logged] (HIVE-24247) StorageBasedAuthorizationProvider does not look into Hadoop ACL while check for access

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HIVE-24247?focusedWorklogId=500039&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-500039 ]

ASF GitHub Bot logged work on HIVE-24247:
-----------------------------------------

                Author: ASF GitHub Bot
            Created on: 13/Oct/20 12:48
            Start Date: 13/Oct/20 12:48
    Worklog Time Spent: 10m 
      Work Description: adesh-rao opened a new pull request #1575:
URL: https://github.com/apache/hive/pull/1575


   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Issue Time Tracking
-------------------

            Worklog Id:     (was: 500039)
    Remaining Estimate: 0h
            Time Spent: 10m

> StorageBasedAuthorizationProvider does not look into Hadoop ACL while check for access
> --------------------------------------------------------------------------------------
>
>                 Key: HIVE-24247
>                 URL: https://issues.apache.org/jira/browse/HIVE-24247
>             Project: Hive
>          Issue Type: Bug
>    Affects Versions: 4.0.0
>            Reporter: Adesh Kumar Rao
>            Assignee: Adesh Kumar Rao
>            Priority: Minor
>             Fix For: 4.0.0
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> StorageBasedAuthorizationProvider uses
> {noformat}
> FileSystem.access(Path, Action)
> {noformat}
> method to check the access.
> This method gets the FileStatus object and checks access based on that. ACL's are not present in FileStatus.
>  
> Instead, Hive should use
> {noformat}
> FileSystem.get(path.toUri(), conf);
> {noformat}
> {noformat}
> <SpecificFileSystemImplementation>.access(Path, Action)
> {noformat}
> where the implemented file system can do the access checks.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)