[ 
https://issues.apache.org/jira/browse/SPARK-29078?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16943127#comment-16943127
 ] 

Peter Toth edited comment on SPARK-29078 at 10/3/19 7:01 AM:
-------------------------------------------------------------

I don't think there should be other databases under {{/apps/hive/warehouse}} 
directory if that is a concern. The {{default}} database points to 
{{/apps/hive/warehouse}}, and new databases are created under that directory as 
well by default, but you have the option to create a new database pointing to a 
very different directory. I mean that way we could avoid this issue.


was (Author: petertoth):
I don't think there should be other databases under {{/apps/hive/warehouse}} 
directory if that is a concern. The {{default}} database points to 
{{/apps/hive/warehouse}}, but you have the option to create a new database 
pointing to a very different directory. I mean that way we could avoid this 
issue.

> Spark shell fails if read permission is not granted to hive warehouse 
> directory
> -------------------------------------------------------------------------------
>
>                 Key: SPARK-29078
>                 URL: https://issues.apache.org/jira/browse/SPARK-29078
>             Project: Spark
>          Issue Type: Bug
>          Components: SQL
>    Affects Versions: 3.0.0
>            Reporter: Mihaly Toth
>            Priority: Major
>
> Similarly to SPARK-20256, in {{SharedSessionState}} when 
> {{GlobalTempViewManager}} is created, it is checked that there is no database 
> exists that has the same name as of the global temp database (name is 
> configurable with {{spark.sql.globalTempDatabase}}) , because that is a 
> special database, which should not exist in the metastore. For this, a read 
> permission is required on the warehouse directory at the moment, which on the 
> other hand would allow listing all the databases of all users.
> When such a read access is not granted for security reasons, an access 
> violation exception should be ignored upon such initial validation.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org
For additional commands, e-mail: issues-h...@spark.apache.org

Reply via email to