[ 
https://issues.apache.org/jira/browse/HIVE-16392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15979693#comment-15979693
 ] 

Lefty Leverenz commented on HIVE-16392:
---------------------------------------

Doc note:  The removal of *hive.warehouse.subdir.inherit.perms* needs to be 
documented in the wiki.  It would be good to mention the use of external 
security systems and include Ashutosh's comment "user may also choose 
SQLStdAuth which ships with Hive if user doesn't want to use external security 
system."

Also, the wiki says that when *hive.files.umask.value* was removed in 0.9.0, it 
was replaced by *hive.warehouse.subdir.inherit.perms* -- perhaps that should be 
updated too.

* [Configuration Properties -- hive.warehouse.subdir.inherit.perms | 
https://cwiki.apache.org/confluence/display/Hive/Configuration+Properties#ConfigurationProperties-hive.warehouse.subdir.inherit.perms]
* [Configuration Properties -- hive.files.umask.value | 
https://cwiki.apache.org/confluence/display/Hive/Configuration+Properties#ConfigurationProperties-hive.files.umask.value]

Added a TODOC3.0 label.

> Remove hive.warehouse.subdir.inherit.perms and all permissions inheritance 
> logic
> --------------------------------------------------------------------------------
>
>                 Key: HIVE-16392
>                 URL: https://issues.apache.org/jira/browse/HIVE-16392
>             Project: Hive
>          Issue Type: Task
>          Components: Security
>            Reporter: Sahil Takiar
>            Assignee: Sahil Takiar
>              Labels: TODOC3.0, backwards-incompatible
>             Fix For: 3.0.0
>
>         Attachments: HIVE-16392.1.patch, HIVE-16392.2.patch
>
>
> As discussed in HIVE-16346 we should remove the config 
> {{hive.warehouse.subdir.inherit.perms}} and all the permissions inheritance 
> logic.
> This feature is no longer needed in Hive as the traditional permission model 
> has largely been replaced by external security systems such as Ranger and 
> Sentry.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to