[
https://issues.apache.org/jira/browse/HIVE-3009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13934055#comment-13934055
]
Sushanth Sowmyan commented on HIVE-3009:
----------------------------------------
Tagging [~thejas] so he add further detail and/or close as necessary.
> do authorization for all metadata operations
> --------------------------------------------
>
> Key: HIVE-3009
> URL: https://issues.apache.org/jira/browse/HIVE-3009
> Project: Hive
> Issue Type: Bug
> Components: Authorization, Metastore
> Reporter: Thejas M Nair
> Assignee: Vandana Ayyalasomayajula
>
> Most of the metadata read operations and some write operations are not
> checking for authorization.
> See org.apache.hadoop.hive.ql.plan.HiveOperation . Operations such as
> DESCTABLE and DROPDATABASE have null for required privileges.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
