[
https://issues.apache.org/jira/browse/SENTRY-1003?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15088661#comment-15088661
]
Dapeng Sun commented on SENTRY-1003:
------------------------------------
{quote}Since we are allowing RELOAD, we should add
hive.reloadable.aux.jars.path (ConfVars.HIVERELOADABLEJARS) to the restrict
list. Otherwise this would become a loophole to load unauthorized jars in
HiveServer2.{quote}
https://reviews.apache.org/r/33622/
Hi [~anneyu], here is the context of adding to the restrict list.
> Support "reload" by updating the classpath of Sentry function aux jar path
> during runtime
> -----------------------------------------------------------------------------------------
>
> Key: SENTRY-1003
> URL: https://issues.apache.org/jira/browse/SENTRY-1003
> Project: Sentry
> Issue Type: Bug
> Components: Sentry
> Affects Versions: 1.4.0, 1.5.1
> Reporter: Anne Yu
> Assignee: Anne Yu
>
> When hive issues "reload" command, sentry needs to get the updated aux jar
> path from "hive.reloadable.aux.jars.path".
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)