ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Scott C Gray (JIRA)" <j...@apache.org>
Subject [jira] [Created] (RANGER-738) Server-wide control over TRANFORM clause in Hive
Date Thu, 19 Nov 2015 20:03:11 GMT
Scott C Gray created RANGER-738:
-----------------------------------

             Summary: Server-wide control over TRANFORM clause in Hive
                 Key: RANGER-738
                 URL: https://issues.apache.org/jira/browse/RANGER-738
             Project: Ranger
          Issue Type: New Feature
          Components: plugins
            Reporter: Scott C Gray


The TRANFORM statement in Hive is a big security hole with Hive run without impersonation,
so when SQL Standard Authorization is enabled, the feature id completely disabled which is
a bit of a sledgehammer approach to securing this statement.

Sentry added support for restricting this statement at a per-user/group level, which should
be adopted by Ranger.

https://issues.apache.org/jira/browse/SENTRY-598





--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message