[ 
https://issues.apache.org/jira/browse/RANGER-2664?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

star updated RANGER-2664:
-------------------------
    Description: 
In hive plugin, when execute sql 'show databases', 

privilege HiveAccessType.USE is required on database '*'.  If it is authorized 
USE privilege, all database will be showed. If not, the sql will be stuck when 
checking privilege.

To solve the problem, just let the sql 'show databases' pass through when 
METASTORE_FILTER_HOOK is not set as AuthorizationMetaStoreFilterHook. Privilege 
HiveAccessType.USE is not required on database '*'.

  was:
In hive plugin, when execute sql 'show databases', 

privilege HiveAccessType.USE is required on database '*'.  If it is authorized 
USE privilege, all database will be showed. If not, the sql will be stuck when 
checking privilege.

To solve the problem, just let the sql 'show databases' pass through when 

METASTORE_FILTER_HOOK

is not set as 

AuthorizationMetaStoreFilterHook. Privilege HiveAccessType.USE is not required 
on database '*'.


> filterListCmdObjects does not work in sql 'show databases'
> ----------------------------------------------------------
>
>                 Key: RANGER-2664
>                 URL: https://issues.apache.org/jira/browse/RANGER-2664
>             Project: Ranger
>          Issue Type: Bug
>          Components: plugins
>            Reporter: star
>            Priority: Major
>
> In hive plugin, when execute sql 'show databases', 
> privilege HiveAccessType.USE is required on database '*'.  If it is 
> authorized USE privilege, all database will be showed. If not, the sql will 
> be stuck when checking privilege.
> To solve the problem, just let the sql 'show databases' pass through when 
> METASTORE_FILTER_HOOK is not set as AuthorizationMetaStoreFilterHook. 
> Privilege HiveAccessType.USE is not required on database '*'.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to