[
https://issues.apache.org/jira/browse/SENTRY-960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sravya Tirukkovalur updated SENTRY-960:
---------------------------------------
Description: (was: HiveSemanticAnalyzerHookContext no longer includes
built-in functions as an input to it's Read Entities. This change hides built
in functions from HiveAuthzBindingHook which is a security hole.
Failing to enforce the whitelist will allow users to execute such functions as
REFLECT and JAVA_METHOD.
https://cwiki.apache.org/confluence/display/Hive/ReflectUDF
)
> Blacklist reflect,java_method using hive.server2.builtin.udf.blacklist
> ----------------------------------------------------------------------
>
> Key: SENTRY-960
> URL: https://issues.apache.org/jira/browse/SENTRY-960
> Project: Sentry
> Issue Type: Bug
> Components: Sentry
> Affects Versions: 1.5.1
> Reporter: Ryan P
> Assignee: Sravya Tirukkovalur
> Fix For: 1.7.0
>
> Attachments: SENTRY-960.10.patch, SENTRY-960.11.patch,
> SENTRY-960.12.patch, SENTRY-960.2.patch, SENTRY-960.3.patch,
> SENTRY-960.4.patch, SENTRY-960.4.patch, SENTRY-960.5.patch,
> SENTRY-960.6.patch, SENTRY-960.7.patch, SENTRY-960.8.patch,
> SENTRY-960.9.patch, SENTRY-960.patch
>
>
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
