[ranger] branch master updated: RANGER-3017:RangerHiveAuthorizer should authorize URL in Hive tempUDFs operation

[rmani]

This is an automated email from the ASF dual-hosted git repository.

rmani pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ranger.git


The following commit(s) were added to refs/heads/master by this push:
     new 71e1dd4  RANGER-3017:RangerHiveAuthorizer should authorize URL in Hive 
tempUDFs operation
71e1dd4 is described below

commit 71e1dd40366c8eb8e9c498b0b5158d85d603af02
Author: Ramesh Mani <rm...@cloudera.com>
AuthorDate: Tue Sep 29 17:22:25 2020 -0700

    RANGER-3017:RangerHiveAuthorizer should authorize URL in Hive tempUDFs 
operation
---
 .../authorization/hive/authorizer/RangerHiveAuthorizer.java    | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git 
a/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
 
b/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
index d2b7807..1bec50b 100644
--- 
a/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
+++ 
b/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
@@ -1841,6 +1841,9 @@ public class RangerHiveAuthorizer extends 
RangerHiveAuthorizerBase {
                        case CREATEDATABASE:
                        case CREATETABLE:
                        case CREATETABLE_AS_SELECT:
+                       case CREATEFUNCTION:
+                       case DROPFUNCTION:
+                       case RELOADFUNCTION:
                        case ALTERDATABASE:
                        case ALTERDATABASE_LOCATION:
                        case ALTERDATABASE_OWNER:
@@ -1882,6 +1885,8 @@ public class RangerHiveAuthorizer extends 
RangerHiveAuthorizerBase {
                        case ALTERPARTITION_MERGEFILES:
                        case ALTERTBLPART_SKEWED_LOCATION:
                        case ALTERTABLE_OWNER:
+                       case ADD:
+                       case DELETE:
                        case QUERY:
                                ret = FsAction.ALL;
                                break;
@@ -1910,9 +1915,6 @@ public class RangerHiveAuthorizer extends 
RangerHiveAuthorizerBase {
                        case SHOWPARTITIONS:
                        case SHOWLOCKS:
                        case SHOWCONF:
-                       case CREATEFUNCTION:
-                       case DROPFUNCTION:
-                       case RELOADFUNCTION:
                        case CREATEMACRO:
                        case DROPMACRO:
                        case CREATEVIEW:
@@ -1946,8 +1948,6 @@ public class RangerHiveAuthorizer extends 
RangerHiveAuthorizerBase {
                        case SET:
                        case RESET:
                        case DFS:
-                       case ADD:
-                       case DELETE:
                        case COMPILE:
                        case START_TRANSACTION:
                        case COMMIT: