Repository: incubator-sentry Updated Branches: refs/heads/master d37830c9a -> d454f8420
SENTRY-212: Restrict access to hive config property hive.sentry.active.role.set which is set by Sentry Hive binding (Jarek Jarcec Cecho via Sravya Tirukkovalur) Project: http://git-wip-us.apache.org/repos/asf/incubator-sentry/repo Commit: http://git-wip-us.apache.org/repos/asf/incubator-sentry/commit/d454f842 Tree: http://git-wip-us.apache.org/repos/asf/incubator-sentry/tree/d454f842 Diff: http://git-wip-us.apache.org/repos/asf/incubator-sentry/diff/d454f842 Branch: refs/heads/master Commit: d454f842072626aaf466b458db0ae56f2a2afb0a Parents: d37830c Author: Sravya Tirukkovalur <[email protected]> Authored: Tue Jun 10 21:55:03 2014 -0700 Committer: Sravya Tirukkovalur <[email protected]> Committed: Tue Jun 10 21:55:03 2014 -0700 ---------------------------------------------------------------------- .../apache/sentry/binding/hive/HiveAuthzBindingSessionHook.java | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/incubator-sentry/blob/d454f842/sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/hive/HiveAuthzBindingSessionHook.java ---------------------------------------------------------------------- diff --git a/sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/hive/HiveAuthzBindingSessionHook.java b/sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/hive/HiveAuthzBindingSessionHook.java index aacad66..1bd0bec 100644 --- a/sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/hive/HiveAuthzBindingSessionHook.java +++ b/sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/hive/HiveAuthzBindingSessionHook.java @@ -54,7 +54,9 @@ public class HiveAuthzBindingSessionHook HiveAuthzConf.HIVE_ACCESS_CONF_URL, HiveAuthzConf.HIVE_SENTRY_CONF_URL, HiveAuthzConf.HIVE_ACCESS_SUBJECT_NAME, - HiveAuthzConf.HIVE_SENTRY_SUBJECT_NAME); + HiveAuthzConf.HIVE_SENTRY_SUBJECT_NAME, + HiveAuthzConf.SENTRY_ACTIVE_ROLE_SET + ); /** * The session hook for sentry authorization that sets the required session level configuration
