Dapeng Sun created HIVE-11179:
---------------------------------
Summary: HIVE should allow custom converting from
HivePrivilegeObjectDesc to privilegeObject for different authorizers
Key: HIVE-11179
URL: https://issues.apache.org/jira/browse/HIVE-11179
Project: Hive
Issue Type: Improvement
Reporter: Dapeng Sun
Assignee: Dapeng Sun
HIVE should allow custom converting from HivePrivilegeObjectDesc to
privilegeObject for different authorizers:
There is a case in Apache Sentry: Sentry support uri and server level
privilege, but in hive side, it uses
{{AuthorizationUtils.getHivePrivilegeObject(privSubjectDesc)}} to do the
converting, and the code in {{getHivePrivilegeObject()}} only handle the scenes
for table and database
{noformat}
privSubjectDesc.getTable() ? HivePrivilegeObjectType.TABLE_OR_VIEW :
HivePrivilegeObjectType.DATABASE;
{noformat}
A solution is move this method to {{HiveAuthorizer}}, so that a custom
Authorizer could enhance it.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
