[
https://issues.apache.org/jira/browse/RANGER-2664?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16990186#comment-16990186
]
Ramesh Mani commented on RANGER-2664:
-------------------------------------
[~starphin] Regarding the redundant code, We do it so we get audit for the
"SHOW DATABASE" command. It doesn't change the end result of the command. It
just does one addition authorization in checkPrivileges call, which doesn't
impact much on performance side of the command also.
Do you want the fix from 2.x ported back to 1.2 version?
> filterListCmdObjects does not work in sql 'show databases'
> ----------------------------------------------------------
>
> Key: RANGER-2664
> URL: https://issues.apache.org/jira/browse/RANGER-2664
> Project: Ranger
> Issue Type: Bug
> Components: plugins
> Affects Versions: 1.2.0
> Reporter: star
> Priority: Major
> Attachments: Ranger-2664-1.2-PermissionDenied.patch,
> Ranger-2664-1.2.patch, ranger-2664.patch
>
>
> In hive plugin, when execute sql 'show databases',
> privilege HiveAccessType.USE is required on database '*'. If it is
> authorized USE privilege, all database will be showed. If not, the sql will
> be stuck when checking privilege.
> To solve the problem, just let the sql 'show databases' pass through when
> METASTORE_FILTER_HOOK is set as AuthorizationMetaStoreFilterHook. Privilege
> HiveAccessType.USE is not required on database '*'.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
