[jira] [Created] (HIVE-7533) sql std auth - set authorization privileges for tables when created from hive cli

["Thejas M Nair (JIRA)" <ji...@apache.org>]

Thejas M Nair created HIVE-7533:
-----------------------------------

             Summary: sql std auth - set authorization privileges for tables when created from hive cli
                 Key: HIVE-7533
                 URL: https://issues.apache.org/jira/browse/HIVE-7533
             Project: Hive
          Issue Type: Bug
          Components: Authorization, SQLStandardAuthorization
            Reporter: Thejas M Nair
            Assignee: Thejas M Nair


As SQL standard authorization mode is not available from hive-cli, the default permissions on table for the table owner are not being set, when the table is created from hive-cli.

It should be possible set the sql standards based authorization as the authorizer for hive-cli, which would update the configuration appropriately. 

hive-cli data access is actually controlled by hdfs, not the authorization policy. As a result, using sql std auth from hive-cli for authorization would lead to a false sense of security. To avoid this, hive-cli users will have to keep the authorization disabled on hive-cli  (in case of sql std auth). But this would affect only authorization checks, not configuration updates by the authorizer.






--
This message was sent by Atlassian JIRA
(v6.2#6252)