You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@sentry.apache.org by "Ryan P (JIRA)" <ji...@apache.org> on 2015/08/03 19:17:05 UTC

[jira] [Updated] (SENTRY-810) CTAS vulnerability

     [ https://issues.apache.org/jira/browse/SENTRY-810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ryan P updated SENTRY-810:
--------------------------
    Attachment: SENTRY-810.patch.1

+ tests

> CTAS vulnerability 
> -------------------
>
>                 Key: SENTRY-810
>                 URL: https://issues.apache.org/jira/browse/SENTRY-810
>             Project: Sentry
>          Issue Type: Bug
>          Components: Hive Plugin
>            Reporter: Ryan P
>            Assignee: Ryan P
>         Attachments: SENTRY-810.patch, SENTRY-810.patch.1
>
>
> HIVE-11319 puts us in an awkward situation where you can leverage your current permissions to overwrite existing directories. I recommend we edit the CTAS permissions map to reflect that of a true insert overwrite directory. This will be annoying for users trying to do legit CTAS operations within the warehouse but as it stands it leave a gaping hole in the security model



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)