[jira] [Created] (DRILL-7151) Show only accessible tables when Hive authorization enabled

["Igor Guzenko (JIRA)" <ji...@apache.org>]

Igor Guzenko created DRILL-7151:
-----------------------------------

             Summary: Show only accessible tables when Hive authorization enabled
                 Key: DRILL-7151
                 URL: https://issues.apache.org/jira/browse/DRILL-7151
             Project: Apache Drill
          Issue Type: Improvement
            Reporter: Igor Guzenko
            Assignee: Igor Guzenko


The SHOW TABLES for Hive worked inconsistently for very long time.

Before changes introduced by DRILL-7115 only accessible tables were shown only when Hive Storage Based Authorization is enabled, but for SQL Standard Based Authorization all tables were shown to user ([related discussion|https://github.com/apache/drill/pull/461#discussion_r58753354]). 

In scope of DRILL-7115 the only accessible restriction for Storage Based Authorization was weakened in order to improve query performance.

There is still need to improve security of Hive show tables query and at the same time do not violate performance requirements. 

For SQL Standard Based Authorization this can be done by asking ```HiveAuthorizationHelper.authorizerV2``` for table's 'SELECT' permission.

For Storage Based Authorization performance acceptable approach is not known for now, one of ideas is try using appropriate Hive storage based authorizer class for the purpose. 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)