[
https://issues.apache.org/jira/browse/HIVE-7294?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14054216#comment-14054216
]
Lefty Leverenz commented on HIVE-7294:
--------------------------------------
This needs to be documented for SHOW GRANT and presumably also SHOW ROLE GRANT:
* [SQL Standard Based Hive Authorization - Show Grant |
https://cwiki.apache.org/confluence/display/Hive/SQL+Standard+Based+Hive+Authorization#SQLStandardBasedHiveAuthorization-ShowGrant]
* [SQL Standard Based Hive Authorization - Show Role Grant |
https://cwiki.apache.org/confluence/display/Hive/SQL+Standard+Based+Hive+Authorization#SQLStandardBasedHiveAuthorization-ShowRoleGrant]
(Is this just for SQL standards based authorization? If not, see
[https://cwiki.apache.org/confluence/display/Hive/LanguageManual+Authorization#LanguageManualAuthorization-ViewingGrantedPrivileges]
and
[https://cwiki.apache.org/confluence/display/Hive/LanguageManual+Authorization#LanguageManualAuthorization-ViewingGrantedRoles].)
> sql std auth - authorize show grant statements
> ----------------------------------------------
>
> Key: HIVE-7294
> URL: https://issues.apache.org/jira/browse/HIVE-7294
> Project: Hive
> Issue Type: Bug
> Components: Authorization, SQLStandardAuthorization
> Reporter: Thejas M Nair
> Assignee: Thejas M Nair
> Fix For: 0.14.0
>
> Attachments: HIVE-7294.1.patch, HIVE-7294.2.patch
>
>
> A non admin user should not be allowed to run show grant commands only for
> themselves or a role they belong to.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
