[ https://issues.apache.org/jira/browse/SENTRY-1231?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Sergio Peña updated SENTRY-1231: -------------------------------- Fix Version/s: 2.0.0 Status: Patch Available (was: Open) > Sentry doesn't secure index location uri, when do "CREATE INDEX LOCATION > ''/uri" > -------------------------------------------------------------------------------- > > Key: SENTRY-1231 > URL: https://issues.apache.org/jira/browse/SENTRY-1231 > Project: Sentry > Issue Type: Bug > Components: Sentry > Affects Versions: 1.8.0 > Reporter: Anne Yu > Assignee: Sergio Peña > Priority: Blocker > Fix For: 2.0.0 > > Attachments: SENTRY-1231.0.patch, SENTRY-1231.1.patch, > SENTRY-1231.3.patch > > > Sentry doesn't check the uri privilege of command, CREATE INDEX LOCATION > '/path'. For example, > {code} > [root@ay-s3-1 ~]# sudo -u hdfs hdfs dfs -getfacl -R /data/testindex > # file: /data/testindex > # owner: hdfs > # group: hive > user::rwx > group::r-x > other::r-x > use systest> CREATE INDEX my_hdfs_table_index ON TABLE my_hdfs_table > (viewtime) AS 'compact' WITH DEFERRED REBUILD LOCATION '/data/testindex'; > {code} -- This message was sent by Atlassian JIRA (v6.4.14#64029)