You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hive.apache.org by "Hive QA (JIRA)" <ji...@apache.org> on 2014/08/04 10:40:12 UTC
[jira] [Commented] (HIVE-7533) sql std auth - set authorization
privileges for tables when created from hive cli
[ https://issues.apache.org/jira/browse/HIVE-7533?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14084430#comment-14084430 ]
Hive QA commented on HIVE-7533:
-------------------------------
{color:red}Overall{color}: -1 at least one tests failed
Here are the results of testing the latest attachment:
https://issues.apache.org/jira/secure/attachment/12659630/HIVE-7533.2.patch
{color:red}ERROR:{color} -1 due to 3 failed/errored test(s), 5870 tests executed
*Failed tests:*
{noformat}
org.apache.hadoop.hive.cli.TestMiniTezCliDriver.testCliDriver_dynpart_sort_optimization
org.apache.hadoop.hive.cli.TestMiniTezCliDriver.testCliDriver_tez_join_hash
org.apache.hadoop.hive.cli.TestMinimrCliDriver.testCliDriver_ql_rewrite_gbtoidx
{noformat}
Test results: http://ec2-174-129-184-35.compute-1.amazonaws.com/jenkins/job/PreCommit-HIVE-TRUNK-Build/161/testReport
Console output: http://ec2-174-129-184-35.compute-1.amazonaws.com/jenkins/job/PreCommit-HIVE-TRUNK-Build/161/console
Test logs: http://ec2-174-129-184-35.compute-1.amazonaws.com/logs/PreCommit-HIVE-TRUNK-Build-161/
Messages:
{noformat}
Executing org.apache.hive.ptest.execution.PrepPhase
Executing org.apache.hive.ptest.execution.ExecutionPhase
Executing org.apache.hive.ptest.execution.ReportingPhase
Tests exited with: TestsFailedException: 3 tests failed
{noformat}
This message is automatically generated.
ATTACHMENT ID: 12659630
> sql std auth - set authorization privileges for tables when created from hive cli
> ---------------------------------------------------------------------------------
>
> Key: HIVE-7533
> URL: https://issues.apache.org/jira/browse/HIVE-7533
> Project: Hive
> Issue Type: Bug
> Components: Authorization, SQLStandardAuthorization
> Reporter: Thejas M Nair
> Assignee: Thejas M Nair
> Attachments: HIVE-7533.1.patch, HIVE-7533.2.patch
>
>
> As SQL standard authorization mode is not available from hive-cli, the default permissions on table for the table owner are not being set, when the table is created from hive-cli.
> It should be possible set the sql standards based authorization as the authorizer for hive-cli, which would update the configuration appropriately.
> hive-cli data access is actually controlled by hdfs, not the authorization policy. As a result, using sql std auth from hive-cli for authorization would lead to a false sense of security. To avoid this, hive-cli users will have to keep the authorization disabled on hive-cli (in case of sql std auth). But this would affect only authorization checks, not configuration updates by the authorizer.
--
This message was sent by Atlassian JIRA
(v6.2#6252)