You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hive.apache.org by "Brock Noland (JIRA)" <ji...@apache.org> on 2013/12/17 16:51:07 UTC

[jira] [Commented] (HIVE-5837) SQL standard based secure authorization for hive

    [ https://issues.apache.org/jira/browse/HIVE-5837?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13850586#comment-13850586 ] 

Brock Noland commented on HIVE-5837:
------------------------------------

[~thejas],

as I mentioned [here|https://issues.apache.org/jira/browse/HIVE-4887?focusedCommentId=13850583&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-13850583] I would consider adding a URI privilege to the model described here. This allows the use of custom UDFs for users. Beyond that I think a SERVER privilege should be added as well. The reason I believe a server privilege is useful is because large deployments of Hive would like to take advantage of multiple HS2 instances while allowing users to only access a single instance. What are you thoughts on these topics?

> SQL standard based secure authorization for hive
> ------------------------------------------------
>
>                 Key: HIVE-5837
>                 URL: https://issues.apache.org/jira/browse/HIVE-5837
>             Project: Hive
>          Issue Type: New Feature
>          Components: Authorization
>            Reporter: Thejas M Nair
>            Assignee: Thejas M Nair
>         Attachments: SQL standard authorization hive.pdf
>
>
> The current default authorization is incomplete and not secure. The alternative of storage based authorization provides security but does not provide fine grained authorization.
> The proposal is to support secure fine grained authorization in hive using SQL standard based authorization model.



--
This message was sent by Atlassian JIRA
(v6.1.4#6159)