You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hive.apache.org by "Thejas M Nair (JIRA)" <ji...@apache.org> on 2018/03/29 19:36:00 UTC

[jira] [Commented] (HIVE-18841) Support authorization of UDF usage in hive

    [ https://issues.apache.org/jira/browse/HIVE-18841?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16419636#comment-16419636 ] 

Thejas M Nair commented on HIVE-18841:
--------------------------------------

Note that only permanent UDF are passed with this patch for authorization. That would address the primary use cases for this feature (encryption related UDFs provided by 3rd party vendors/cluster admins).
It doesn't make sense to do usage authorization for temporary UDF as the user already has to have permissions to create them (you have to create it every time to use it).
In case of built-in UDF, a lot of these UDFs are implicitly used (eg. cast one type to another), so it doesn't make sense to authorize their usage, as it would be very confusing for users.


> Support authorization of UDF usage in hive
> ------------------------------------------
>
>                 Key: HIVE-18841
>                 URL: https://issues.apache.org/jira/browse/HIVE-18841
>             Project: Hive
>          Issue Type: New Feature
>            Reporter: Thejas M Nair
>            Assignee: Thejas M Nair
>            Priority: Critical
>         Attachments: HIVE-18841.1.patch
>
>
> It should be possible to create authorization policies on UDF usage. 
> ie, it should be possible to control who can use certain UDF in their queries.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)