Gao, Rui-Xian created TRAFODION-2463: ----------------------------------------
Summary: Hive: Any user can do update statistics for hive tables Key: TRAFODION-2463 URL: https://issues.apache.org/jira/browse/TRAFODION-2463 Project: Apache Trafodion Issue Type: Bug Components: sql-security Affects Versions: 2.2-incubating Environment: hadoop - HDP2.4 OS - CentOS6.7 Reporter: Gao, Rui-Xian Assignee: Roberta Marton Currently, any user can do 'update statistics' for hive tables, then the user will become owner for this table and has all privileges on it. 1. create table in hive : create external table ext_t1(a int); 2. logon trafci with user1, select from hive.hive.ext_t1 will get internal error as described above, but the user can do 'update statistics' for the hive table. connect user1/******; SQL>update statistics for table hive.qa_db_1.traf_ext_t1 on every column; — SQL operation complete. Expect result is ERROR[4481], the user cannot do 'update statistics' since he/she doesn't have select privileges on the table. -- This message was sent by Atlassian JIRA (v6.3.4#6332)