[jira] [Updated] (HIVE-6252) sql std auth - support 'with admin option' in revoke role metastore api
[ https://issues.apache.org/jira/browse/HIVE-6252?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Thejas M Nair updated HIVE-6252: Release Note: Adds support for "ADMIN OPTION FOR" in revoke role. It lets you revoke the ADMIN OPTION of a user on a role. The user remains a member of that role. eg - revoke admin option for src_role_wadmin from user user2; See release note for doc info. > sql std auth - support 'with admin option' in revoke role metastore api > --- > > Key: HIVE-6252 > URL: https://issues.apache.org/jira/browse/HIVE-6252 > Project: Hive > Issue Type: Sub-task > Components: Authorization, SQLStandardAuthorization >Reporter: Thejas M Nair >Assignee: Jason Dere > Labels: TODOC14 > Fix For: 0.14.0 > > Attachments: HIVE-6252.1.patch, HIVE-6252.2.patch, HIVE-6252.3.patch > > Original Estimate: 24h > Remaining Estimate: 24h > > The metastore api for revoking role privileges does not accept 'with admin > option' , though the syntax supports it. SQL syntax also supports grantor > specification in revoke role statement. > It should be similar to the grant_role api. -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Updated] (HIVE-6252) sql std auth - support 'with admin option' in revoke role metastore api
[ https://issues.apache.org/jira/browse/HIVE-6252?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Thejas M Nair updated HIVE-6252: Labels: TODOC14 (was: ) > sql std auth - support 'with admin option' in revoke role metastore api > --- > > Key: HIVE-6252 > URL: https://issues.apache.org/jira/browse/HIVE-6252 > Project: Hive > Issue Type: Sub-task > Components: Authorization, SQLStandardAuthorization >Reporter: Thejas M Nair >Assignee: Jason Dere > Labels: TODOC14 > Fix For: 0.14.0 > > Attachments: HIVE-6252.1.patch, HIVE-6252.2.patch, HIVE-6252.3.patch > > Original Estimate: 24h > Remaining Estimate: 24h > > The metastore api for revoking role privileges does not accept 'with admin > option' , though the syntax supports it. SQL syntax also supports grantor > specification in revoke role statement. > It should be similar to the grant_role api. -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Updated] (HIVE-6252) sql std auth - support 'with admin option' in revoke role metastore api
[ https://issues.apache.org/jira/browse/HIVE-6252?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Thejas M Nair updated HIVE-6252: Resolution: Fixed Fix Version/s: 0.14.0 Status: Resolved (was: Patch Available) Patch committed to trunk. Thanks for the patch Jason! > sql std auth - support 'with admin option' in revoke role metastore api > --- > > Key: HIVE-6252 > URL: https://issues.apache.org/jira/browse/HIVE-6252 > Project: Hive > Issue Type: Sub-task > Components: Authorization, SQLStandardAuthorization >Reporter: Thejas M Nair >Assignee: Jason Dere > Fix For: 0.14.0 > > Attachments: HIVE-6252.1.patch, HIVE-6252.2.patch, HIVE-6252.3.patch > > Original Estimate: 24h > Remaining Estimate: 24h > > The metastore api for revoking role privileges does not accept 'with admin > option' , though the syntax supports it. SQL syntax also supports grantor > specification in revoke role statement. > It should be similar to the grant_role api. -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Updated] (HIVE-6252) sql std auth - support 'with admin option' in revoke role metastore api
[ https://issues.apache.org/jira/browse/HIVE-6252?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jason Dere updated HIVE-6252: - Attachment: HIVE-6252.3.patch Patch v3, changes based on Thejas feedback. > sql std auth - support 'with admin option' in revoke role metastore api > --- > > Key: HIVE-6252 > URL: https://issues.apache.org/jira/browse/HIVE-6252 > Project: Hive > Issue Type: Sub-task > Components: Authorization, SQLStandardAuthorization >Reporter: Thejas M Nair >Assignee: Jason Dere > Attachments: HIVE-6252.1.patch, HIVE-6252.2.patch, HIVE-6252.3.patch > > Original Estimate: 24h > Remaining Estimate: 24h > > The metastore api for revoking role privileges does not accept 'with admin > option' , though the syntax supports it. SQL syntax also supports grantor > specification in revoke role statement. > It should be similar to the grant_role api. -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Updated] (HIVE-6252) sql std auth - support 'with admin option' in revoke role metastore api
[ https://issues.apache.org/jira/browse/HIVE-6252?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jason Dere updated HIVE-6252: - Attachment: HIVE-6252.2.patch Patch v2: - Fix unit test failures. Apparently argument checking for grant_revoke_roles() was too strict for the existing unit tests, made the fields in GrantRevokeRequest optional to allow nulls. - Review changes per Thejas > sql std auth - support 'with admin option' in revoke role metastore api > --- > > Key: HIVE-6252 > URL: https://issues.apache.org/jira/browse/HIVE-6252 > Project: Hive > Issue Type: Sub-task > Components: Authorization, SQLStandardAuthorization >Reporter: Thejas M Nair >Assignee: Jason Dere > Attachments: HIVE-6252.1.patch, HIVE-6252.2.patch > > Original Estimate: 24h > Remaining Estimate: 24h > > The metastore api for revoking role privileges does not accept 'with admin > option' , though the syntax supports it. SQL syntax also supports grantor > specification in revoke role statement. > It should be similar to the grant_role api. -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Updated] (HIVE-6252) sql std auth - support 'with admin option' in revoke role metastore api
[ https://issues.apache.org/jira/browse/HIVE-6252?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jason Dere updated HIVE-6252: - Status: Patch Available (was: Open) > sql std auth - support 'with admin option' in revoke role metastore api > --- > > Key: HIVE-6252 > URL: https://issues.apache.org/jira/browse/HIVE-6252 > Project: Hive > Issue Type: Sub-task > Components: Authorization, SQLStandardAuthorization >Reporter: Thejas M Nair >Assignee: Jason Dere > Attachments: HIVE-6252.1.patch > > Original Estimate: 24h > Remaining Estimate: 24h > > The metastore api for revoking role privileges does not accept 'with admin > option' , though the syntax supports it. SQL syntax also supports grantor > specification in revoke role statement. > It should be similar to the grant_role api. -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Updated] (HIVE-6252) sql std auth - support 'with admin option' in revoke role metastore api
[ https://issues.apache.org/jira/browse/HIVE-6252?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jason Dere updated HIVE-6252: - Attachment: HIVE-6252.1.patch Attaching patch. Since an extra grantOption argument was required for revoke_role, this requires Metastore API changes. I ended up creating a new thrift metastore call to do handle both grant/revoke role requests. > sql std auth - support 'with admin option' in revoke role metastore api > --- > > Key: HIVE-6252 > URL: https://issues.apache.org/jira/browse/HIVE-6252 > Project: Hive > Issue Type: Sub-task > Components: Authorization, SQLStandardAuthorization >Reporter: Thejas M Nair > Attachments: HIVE-6252.1.patch > > Original Estimate: 24h > Remaining Estimate: 24h > > The metastore api for revoking role privileges does not accept 'with admin > option' , though the syntax supports it. SQL syntax also supports grantor > specification in revoke role statement. > It should be similar to the grant_role api. -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Updated] (HIVE-6252) sql std auth - support 'with admin option' in revoke role metastore api
[ https://issues.apache.org/jira/browse/HIVE-6252?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Thejas M Nair updated HIVE-6252: Component/s: SQLStandardAuthorization > sql std auth - support 'with admin option' in revoke role metastore api > --- > > Key: HIVE-6252 > URL: https://issues.apache.org/jira/browse/HIVE-6252 > Project: Hive > Issue Type: Sub-task > Components: Authorization, SQLStandardAuthorization >Reporter: Thejas M Nair > Original Estimate: 24h > Remaining Estimate: 24h > > The metastore api for revoking role privileges does not accept 'with admin > option' , though the syntax supports it. SQL syntax also supports grantor > specification in revoke role statement. > It should be similar to the grant_role api. -- This message was sent by Atlassian JIRA (v6.2#6252)
