You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hive.apache.org by "Thejas M Nair (JIRA)" <ji...@apache.org> on 2012/05/08 19:51:56 UTC

[jira] [Created] (HIVE-3009) do authorization for all metadata operations

Thejas M Nair created HIVE-3009:
-----------------------------------

             Summary: do authorization for all metadata operations
                 Key: HIVE-3009
                 URL: https://issues.apache.org/jira/browse/HIVE-3009
             Project: Hive
          Issue Type: Bug
          Components: Authorization
            Reporter: Thejas M Nair


Most of the metadata read operations and some write operations are not checking for authorization. 
See org.apache.hadoop.hive.ql.plan.HiveOperation . Operations such as DESCTABLE and DROPDATABASE have null for required privileges. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HIVE-3009) do authorization for all metadata operations

Posted by "Ashutosh Chauhan (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HIVE-3009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13447988#comment-13447988 ] 

Ashutosh Chauhan commented on HIVE-3009:
----------------------------------------

@Vandana : If you are still working on this, please update the patch and I will take a look.
                
> do authorization for all metadata operations
> --------------------------------------------
>
>                 Key: HIVE-3009
>                 URL: https://issues.apache.org/jira/browse/HIVE-3009
>             Project: Hive
>          Issue Type: Bug
>          Components: Authorization, Metastore
>            Reporter: Thejas M Nair
>            Assignee: Vandana Ayyalasomayajula
>
> Most of the metadata read operations and some write operations are not checking for authorization. 
> See org.apache.hadoop.hive.ql.plan.HiveOperation . Operations such as DESCTABLE and DROPDATABASE have null for required privileges. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (HIVE-3009) do authorization for all metadata operations

Posted by "Carl Steinbach (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HIVE-3009?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Carl Steinbach updated HIVE-3009:
---------------------------------

    Component/s: Metastore
    
> do authorization for all metadata operations
> --------------------------------------------
>
>                 Key: HIVE-3009
>                 URL: https://issues.apache.org/jira/browse/HIVE-3009
>             Project: Hive
>          Issue Type: Bug
>          Components: Authorization, Metastore
>            Reporter: Thejas M Nair
>
> Most of the metadata read operations and some write operations are not checking for authorization. 
> See org.apache.hadoop.hive.ql.plan.HiveOperation . Operations such as DESCTABLE and DROPDATABASE have null for required privileges. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HIVE-3009) do authorization for all metadata operations

Posted by "Hudson (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HIVE-3009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13398039#comment-13398039 ] 

Hudson commented on HIVE-3009:
------------------------------

Integrated in Hive-trunk-h0.21 #1500 (See [https://builds.apache.org/job/Hive-trunk-h0.21/1500/])
    HIVE-3009 Memory leak in TUGIContainingTransport (Ashutosh Chauhan via egc) (Revision 1352260)

     Result = FAILURE
ecapriolo : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1352260
Files : 
* /hive/trunk/shims/src/common/java/org/apache/hadoop/hive/thrift/TUGIContainingTransport.java

                
> do authorization for all metadata operations
> --------------------------------------------
>
>                 Key: HIVE-3009
>                 URL: https://issues.apache.org/jira/browse/HIVE-3009
>             Project: Hive
>          Issue Type: Bug
>          Components: Authorization
>            Reporter: Thejas M Nair
>
> Most of the metadata read operations and some write operations are not checking for authorization. 
> See org.apache.hadoop.hive.ql.plan.HiveOperation . Operations such as DESCTABLE and DROPDATABASE have null for required privileges. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HIVE-3009) do authorization for all metadata operations

Posted by "Vandana Ayyalasomayajula (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HIVE-3009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13435621#comment-13435621 ] 

Vandana Ayyalasomayajula commented on HIVE-3009:
------------------------------------------------

@Carl: I am having problems making the build + tests run using ant. So I am just waiting to get them passed. Once I get that successfully done, I will mark the jira as patch available.
                
> do authorization for all metadata operations
> --------------------------------------------
>
>                 Key: HIVE-3009
>                 URL: https://issues.apache.org/jira/browse/HIVE-3009
>             Project: Hive
>          Issue Type: Bug
>          Components: Authorization, Metastore
>            Reporter: Thejas M Nair
>            Assignee: Vandana Ayyalasomayajula
>
> Most of the metadata read operations and some write operations are not checking for authorization. 
> See org.apache.hadoop.hive.ql.plan.HiveOperation . Operations such as DESCTABLE and DROPDATABASE have null for required privileges. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HIVE-3009) do authorization for all metadata operations

Posted by "Carl Steinbach (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HIVE-3009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13434567#comment-13434567 ] 

Carl Steinbach commented on HIVE-3009:
--------------------------------------

@Vandana: If this is ready for review please set the status to "Patch Available". Thanks.
                
> do authorization for all metadata operations
> --------------------------------------------
>
>                 Key: HIVE-3009
>                 URL: https://issues.apache.org/jira/browse/HIVE-3009
>             Project: Hive
>          Issue Type: Bug
>          Components: Authorization, Metastore
>            Reporter: Thejas M Nair
>            Assignee: Vandana Ayyalasomayajula
>
> Most of the metadata read operations and some write operations are not checking for authorization. 
> See org.apache.hadoop.hive.ql.plan.HiveOperation . Operations such as DESCTABLE and DROPDATABASE have null for required privileges. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HIVE-3009) do authorization for all metadata operations

Posted by "Vandana Ayyalasomayajula (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HIVE-3009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13434449#comment-13434449 ] 

Vandana Ayyalasomayajula commented on HIVE-3009:
------------------------------------------------

Review Link: https://reviews.facebook.net/D4635
                
> do authorization for all metadata operations
> --------------------------------------------
>
>                 Key: HIVE-3009
>                 URL: https://issues.apache.org/jira/browse/HIVE-3009
>             Project: Hive
>          Issue Type: Bug
>          Components: Authorization, Metastore
>            Reporter: Thejas M Nair
>            Assignee: Vandana Ayyalasomayajula
>
> Most of the metadata read operations and some write operations are not checking for authorization. 
> See org.apache.hadoop.hive.ql.plan.HiveOperation . Operations such as DESCTABLE and DROPDATABASE have null for required privileges. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (HIVE-3009) do authorization for all metadata operations

Posted by "Sushanth Sowmyan (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/HIVE-3009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13457941#comment-13457941 ] 

Sushanth Sowmyan commented on HIVE-3009:
----------------------------------------

I'm +1 on intent/code attached on the review.

I've still not got all the tests to pass on the current branch, but that might be due to issues on my end. If we get all tests succeeding, this can be patched in.
                
> do authorization for all metadata operations
> --------------------------------------------
>
>                 Key: HIVE-3009
>                 URL: https://issues.apache.org/jira/browse/HIVE-3009
>             Project: Hive
>          Issue Type: Bug
>          Components: Authorization, Metastore
>            Reporter: Thejas M Nair
>            Assignee: Vandana Ayyalasomayajula
>
> Most of the metadata read operations and some write operations are not checking for authorization. 
> See org.apache.hadoop.hive.ql.plan.HiveOperation . Operations such as DESCTABLE and DROPDATABASE have null for required privileges. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Assigned] (HIVE-3009) do authorization for all metadata operations

Posted by "Vandana Ayyalasomayajula (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/HIVE-3009?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vandana Ayyalasomayajula reassigned HIVE-3009:
----------------------------------------------

    Assignee: Vandana Ayyalasomayajula
    
> do authorization for all metadata operations
> --------------------------------------------
>
>                 Key: HIVE-3009
>                 URL: https://issues.apache.org/jira/browse/HIVE-3009
>             Project: Hive
>          Issue Type: Bug
>          Components: Authorization, Metastore
>            Reporter: Thejas M Nair
>            Assignee: Vandana Ayyalasomayajula
>
> Most of the metadata read operations and some write operations are not checking for authorization. 
> See org.apache.hadoop.hive.ql.plan.HiveOperation . Operations such as DESCTABLE and DROPDATABASE have null for required privileges. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira