[
https://issues.apache.org/jira/browse/HCATALOG-106?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ashutosh Chauhan reassigned HCATALOG-106:
-----------------------------------------
Assignee: Ashutosh Chauhan
> Describe database is not be checked for authorization
> -----------------------------------------------------
>
> Key: HCATALOG-106
> URL: https://issues.apache.org/jira/browse/HCATALOG-106
> Project: HCatalog
> Issue Type: Bug
> Components: security
> Affects Versions: 0.2
> Reporter: Alan Gates
> Assignee: Ashutosh Chauhan
> Priority: Minor
> Fix For: 0.3
>
>
> Based on a code inspection of HCatSemanticAnalyzer.java it looks as if
> HCatalog is not checking whether a user is authorized to do a describe
> database before doing it. HCatalog only allows describe table if the user
> has read permission on the table directory. It seems we should do the same
> in the describe database case.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
