[
https://issues.apache.org/jira/browse/HCATALOG-485?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Lefty Leverenz updated HCATALOG-485:
------------------------------------
Attachment: HCATALOG-485.1.patch
Patch 1 adds information about GRANT and REVOKE statements in two sections of
authorization.xml:
h5. Unused DDL for Permissions
DDL statements that manage permissions for Hive's default authorization model
do not have any effect on permissions in the storage-based model.
All GRANT and REVOKE statements for users, groups, and roles are ignored. See
the Known Issues section below.
h5. Known Issues
5. Although DDL statements for managing permissions have no effect in
storage-based authorization, currently they do not return error messages. See
[https://issues.apache.org/jira/browse/HIVE-3010].
> Document that storage-based security ignores GRANT/REVOKE statements
> --------------------------------------------------------------------
>
> Key: HCATALOG-485
> URL: https://issues.apache.org/jira/browse/HCATALOG-485
> Project: HCatalog
> Issue Type: Bug
> Components: documentation
> Reporter: Lefty Leverenz
> Assignee: Lefty Leverenz
> Attachments: HCATALOG-485.1.patch
>
>
> In HCatalog's authorization doc, explain that the SQL statements GRANT and
> REVOKE don't work for storage-based security, which uses the read/write
> permissions of underlying storage entities to determine a user's permissions
> for databases, tables, and partitions. (This is different from Hive's
> default authorization, which has RDBMS-style permissions for users, groups,
> and roles as described in [Hive
> Authorization|https://cwiki.apache.org/confluence/display/Hive/LanguageManual+Authorization].)
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
