[jira] [Created] (HIVE-15687) SQL Standard auth: INSERT and DELETE privileges don't actually exist.

["Carter Shanklin (JIRA)" <ji...@apache.org>]

Carter Shanklin created HIVE-15687:
--------------------------------------

             Summary: SQL Standard auth: INSERT and DELETE privileges don't actually exist.
                 Key: HIVE-15687
                 URL: https://issues.apache.org/jira/browse/HIVE-15687
             Project: Hive
          Issue Type: Bug
            Reporter: Carter Shanklin


The documentation states https://cwiki.apache.org/confluence/display/Hive/SQL+Standard+Based+Hive+Authorization#SQLStandardBasedHiveAuthorization-ObjectPrivilegeCommands that there are privilege types of INSERT | SELECT | UPDATE | DELETE | ALL.

Experience suggests otherwise:

{code}
: jdbc:hive2://localhost:10000/default> grant select on table secured_table to role my_role;
No rows affected (0.034 seconds)
0: jdbc:hive2://localhost:10000/default> grant insert on table secured_table to role my_role;
Error: Error while compiling statement: FAILED: SemanticException Undefined privilege Insert (state=42000,code=40000)
0: jdbc:hive2://localhost:10000/default> grant update on table secured_table to role my_role;
No rows affected (0.037 seconds)
0: jdbc:hive2://localhost:10000/default> grant delete on table secured_table to role my_role;
Error: Error while compiling statement: FAILED: SemanticException Undefined privilege Delete (state=42000,code=40000)

0: jdbc:hive2://localhost:10000/default> select version();
+--------------------------------------------------------------+--+
|                             _c0                              |
+--------------------------------------------------------------+--+
| 2.1.0.2.6.0.0-369 r434bfeb707d21f6b44121ac7dfe5adbadb746387  |
+--------------------------------------------------------------+--+
{code}

It would be good to support these, especially since Hive supports updates and deletions.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)