Repository: ranger Updated Branches: refs/heads/master 254ebf156 -> 0981a4628
RANGER-1355:Ranger HiveAuthorizer should check for ALTER permission for MSCK command while authorizing Project: http://git-wip-us.apache.org/repos/asf/ranger/repo Commit: http://git-wip-us.apache.org/repos/asf/ranger/commit/0981a462 Tree: http://git-wip-us.apache.org/repos/asf/ranger/tree/0981a462 Diff: http://git-wip-us.apache.org/repos/asf/ranger/diff/0981a462 Branch: refs/heads/master Commit: 0981a4628849d4b8f8d5624a10ec74cf013dc188 Parents: 254ebf1 Author: rmani <rm...@hortonworks.com> Authored: Thu Feb 9 22:29:35 2017 -0800 Committer: rmani <rm...@hortonworks.com> Committed: Thu Feb 9 22:29:35 2017 -0800 ---------------------------------------------------------------------- .../ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/ranger/blob/0981a462/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java ---------------------------------------------------------------------- diff --git a/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java b/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java index c107b4b..d468aeb 100644 --- a/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java +++ b/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java @@ -902,6 +902,7 @@ public class RangerHiveAuthorizer extends RangerHiveAuthorizerBase { case ALTERVIEW_PROPERTIES: case ALTERVIEW_RENAME: case DROPVIEW_PROPERTIES: + case MSCK: accessType = HiveAccessType.ALTER; break; @@ -1001,7 +1002,6 @@ public class RangerHiveAuthorizer extends RangerHiveAuthorizerBase { case DROPROLE: case EXPLAIN: case GRANT_ROLE: - case MSCK: case REVOKE_ROLE: case RESET: case SET: