[
https://issues.apache.org/jira/browse/HIVE-22948?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17048826#comment-17048826
]
Gopal Vijayaraghavan commented on HIVE-22948:
---------------------------------------------
Missed a file in the patch.
> QueryCache: Treat query cache locations as temporary storage
> ------------------------------------------------------------
>
> Key: HIVE-22948
> URL: https://issues.apache.org/jira/browse/HIVE-22948
> Project: Hive
> Issue Type: Bug
> Components: Query Planning
> Affects Versions: 4.0.0, 3.1.2
> Reporter: Gopal Vijayaraghavan
> Assignee: Gopal Vijayaraghavan
> Priority: Major
> Attachments: HIVE-22948.1.patch, HIVE-22948.1.patch
>
>
> The WriteEntity with a query cache query is considered for user authorization
> without having direct access for users.
> https://github.com/apache/hive/blob/master/ql/src/java/org/apache/hadoop/hive/ql/security/authorization/command/CommandAuthorizerV2.java#L111
> {code}
> if (privObject instanceof WriteEntity &&
> ((WriteEntity)privObject).isTempURI()) {
> // do not authorize temporary uris
> continue;
> }
> {code}
> is not satisfied by the queries qualifying for the query cache.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
