You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hive.apache.org by "Chengbing Liu (JIRA)" <ji...@apache.org> on 2015/09/21 12:20:04 UTC

[jira] [Created] (HIVE-11901) StorageBasedAuthorizationProvider requires write permission on table for SELECT statements

Chengbing Liu created HIVE-11901:
------------------------------------

             Summary: StorageBasedAuthorizationProvider requires write permission on table for SELECT statements
                 Key: HIVE-11901
                 URL: https://issues.apache.org/jira/browse/HIVE-11901
             Project: Hive
          Issue Type: Bug
          Components: Authorization
    Affects Versions: 1.2.1
            Reporter: Chengbing Liu
            Assignee: Chengbing Liu


With HIVE-7895, it will require write permission on the table directory even for a SELECT statement.

Looking at the stacktrace, it seems the method {{StorageBasedAuthorizationProvider#authorize(Table table, Partition part, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv)}} always treats a null partition as a CREATE statement, which can also be a SELECT.

We may have to check {{readRequiredPriv}} and {{writeRequiredPriv}} first   in order to tell which statement it is.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)