Describe database is not be checked for authorization
-----------------------------------------------------
Key: HCATALOG-106
URL: https://issues.apache.org/jira/browse/HCATALOG-106
Project: HCatalog
Issue Type: Bug
Components: security
Affects Versions: 0.2
Reporter: Alan Gates
Priority: Minor
Fix For: 0.3
Based on a code inspection of HCatSemanticAnalyzer.java it looks as if HCatalog
is not checking whether a user is authorized to do a describe database before
doing it. HCatalog only allows describe table if the user has read permission
on the table directory. It seems we should do the same in the describe
database case.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
