[
https://issues.apache.org/jira/browse/HIVE-7890?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Brock Noland updated HIVE-7890:
-------------------------------
Description:
In SessionState.start [an instance of the the HMSClient is
created|https://github.com/apache/hive/blob/trunk/ql/src/java/org/apache/hadoop/hive/ql/session/SessionState.java#L367].
When impersonation is enabled, this call does not occur within a "doas" call
and thus the HMSClient is created as the server user, not the impersonated user.
Thus calls to the HMS are made by the "hive" user as opposed to the end user.
This causes file ownership such as a database directory owner to be incorrect.
was:In SessionStart an instance of the the HMSClient is created. When
impersonation is enabled, this call does not occur within a "doas" call and
thus the HMSClient is created as the server user, not the impersonated user.
> SessionStart creates HMS Client while not impersonating
> -------------------------------------------------------
>
> Key: HIVE-7890
> URL: https://issues.apache.org/jira/browse/HIVE-7890
> Project: Hive
> Issue Type: Bug
> Reporter: Brock Noland
> Attachments: HIVE-7890.2.patch
>
>
> In SessionState.start [an instance of the the HMSClient is
> created|https://github.com/apache/hive/blob/trunk/ql/src/java/org/apache/hadoop/hive/ql/session/SessionState.java#L367].
> When impersonation is enabled, this call does not occur within a "doas" call
> and thus the HMSClient is created as the server user, not the impersonated
> user.
> Thus calls to the HMS are made by the "hive" user as opposed to the end user.
> This causes file ownership such as a database directory owner to be incorrect.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
