[jira] [Commented] (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13013754#comment-13013754 ] Devaraj Das commented on HIVE-78: - BTW, was any thought put in to implement the authorization

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12980971#action_12980971 ] He Yongqiang commented on HIVE-78: -- Here is mysql upgrade script: http://wiki.apache.org/had

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12979892#action_12979892 ] Ashutosh Chauhan commented on HIVE-78: -- @Namit, Sounds good. Thanks for the info. > Aut

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12979868#action_12979868 ] Namit Jain commented on HIVE-78: All the tests are passing - we are blocked on the names of th

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12979827#action_12979827 ] Ashutosh Chauhan commented on HIVE-78: -- John's latest comment on HIVE-1696 https://issue

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12978978#action_12978978 ] Namit Jain commented on HIVE-78: I am getting some compilation errors - can you regenerate the

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12978175#action_12978175 ] Namit Jain commented on HIVE-78: My bad, I committed HIVE-1840 just now. Can you regenerate th

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12975711#action_12975711 ] Namit Jain commented on HIVE-78: Can you check if 'USER', 'ROLE' and 'OPTION' are not used as

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12975710#action_12975710 ] Namit Jain commented on HIVE-78: I think you can do the following optimization: feel free to d

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12975708#action_12975708 ] Namit Jain commented on HIVE-78: HadoopDefaultAuthenticator System.out.println() present Pr

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12975689#action_12975689 ] Namit Jain commented on HIVE-78: hive-default.xml: hive.variable.substitute true This

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12973388#action_12973388 ] John Sichi commented on HIVE-78: A few more comments on patch 10 in https://reviews.apache.or

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12973289#action_12973289 ] He Yongqiang commented on HIVE-78: -- A new no_thrift patch addressed John's review comments. T

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12972644#action_12972644 ] John Sichi commented on HIVE-78: I added one comment about referring to "grantee" instead of "

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12972643#action_12972643 ] John Sichi commented on HIVE-78: @Yongqiang: New review comments in https://reviews.apache.or

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12972626#action_12972626 ] John Sichi commented on HIVE-78: @Alan: we discussed this in depth at the last Hive contribut

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12972622#action_12972622 ] Alan Gates commented on HIVE-78: Having Hive own all the files and run all the jobs presents s

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12972256#action_12972256 ] He Yongqiang commented on HIVE-78: -- I think this jira is just a first step towards a fulfille

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12972233#action_12972233 ] Alan Gates commented on HIVE-78: There's been quite a bit of discussion back and forth in this

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12971793#action_12971793 ] He Yongqiang commented on HIVE-78: -- @John Regarding the thrift API's object embedding, do yo

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12971555#action_12971555 ] John Sichi commented on HIVE-78: Regarding pass-by-name vs pass-by-value for object references

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12971460#action_12971460 ] He Yongqiang commented on HIVE-78: -- By "If you want, do follow ups on them." I meant "if you

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12971455#action_12971455 ] He Yongqiang commented on HIVE-78: -- No. I do not think i need to make changes in short term f

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12971442#action_12971442 ] John Sichi commented on HIVE-78: We can't take the size of a patch as a justification for chec

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12971428#action_12971428 ] He Yongqiang commented on HIVE-78: -- Let's get this in asap and do follow-ups. It is really pa

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12971419#action_12971419 ] He Yongqiang commented on HIVE-78: -- Needs to open follow-up jiras for: 1. Avoid embedding obj

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12971161#action_12971161 ] John Sichi commented on HIVE-78: Some more from me: * There's a bug when attempting to grant

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12970662#action_12970662 ] John Sichi commented on HIVE-78: First batch of review comments. JDO: * Do we want roles to

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12970002#action_12970002 ] John Sichi commented on HIVE-78: HIVE-78.6.no_thrift.patch has the thrift-generated code. >

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12969896#action_12969896 ] He Yongqiang commented on HIVE-78: -- You can find it from the complete patch. will rebase the

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12969890#action_12969890 ] John Sichi commented on HIVE-78: Taking a first look at this one; I will have a number of sugg

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12933291#action_12933291 ] He Yongqiang commented on HIVE-78: -- >>Can you check who adds inputs/outputs for locking opera

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12932587#action_12932587 ] Namit Jain commented on HIVE-78: In case of dynamic partitions, you can also have DummyPartiti

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12932354#action_12932354 ] Namit Jain commented on HIVE-78: Driver: //do the authorization check 385 if (Hi

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12932306#action_12932306 ] Namit Jain commented on HIVE-78: Few minor comments: 1. Can you add more comments in M* files

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12931518#action_12931518 ] Namit Jain commented on HIVE-78: Also, can you refresh and re-apply the patch ? It does not ap

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12931504#action_12931504 ] Namit Jain commented on HIVE-78: Can you add the tests in the non-thrift patch ? It becomes ea

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12930822#action_12930822 ] He Yongqiang commented on HIVE-78: -- >>Will there be a way to turn off authorization (through

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12930820#action_12930820 ] Pradeep Kamath commented on HIVE-78: Will there be a way to turn off authorization (throug

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12929896#action_12929896 ] John Sichi commented on HIVE-78: It looks like HIVE-78.1.nothrift.patch still has a bunch of t

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12929888#action_12929888 ] John Sichi commented on HIVE-78: https://reviews.apache.org/r/55/diff/#index_header > Authori

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12924039#action_12924039 ] Carl Steinbach commented on HIVE-78: @Namit: I think it's fine to take an incremental appr

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12924032#action_12924032 ] John Sichi commented on HIVE-78: (implementation note) If we really need multiple metastore t

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12924026#action_12924026 ] Namit Jain commented on HIVE-78: Overall, there are many security holes in the system. and we

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12923734#action_12923734 ] He Yongqiang commented on HIVE-78: -- By-passing the hdfs permission from hive layer is just on

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12923733#action_12923733 ] Carl Steinbach commented on HIVE-78: The issue that Todd raised is pretty important and ne

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12923719#action_12923719 ] Todd Lipcon commented on HIVE-78: - I'm a little unclear on how the user identity is passed dow

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12923671#action_12923671 ] He Yongqiang commented on HIVE-78: -- Sorry, in the previous comment: by "one accept then accep

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12923667#action_12923667 ] He Yongqiang commented on HIVE-78: -- The other option we came up from offline discussion is th

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12923642#action_12923642 ] He Yongqiang commented on HIVE-78: -- @dhruba HDFS has its own authorization. So if we allow an

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12923624#action_12923624 ] dhruba borthakur commented on HIVE-78: -- Can somebody pl comment on how this ties in with

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12923598#action_12923598 ] Namit Jain commented on HIVE-78: Please comment - we would like to hear all use cases before f

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12923597#action_12923597 ] Carl Steinbach commented on HIVE-78: Authorization proposal on the wiki: http://wiki.apach

[jira] Commented: (HIVE-78) Authorization infrastructure for Hive

[ https://issues.apache.org/jira/browse/HIVE-78?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12919104#action_12919104 ] Namit Jain commented on HIVE-78: Is anyone working on this ? > Authorization infrastructure f