Igor Guzenko created DRILL-7151:
-----------------------------------
Summary: Show only accessible tables when Hive authorization
enabled
Key: DRILL-7151
URL: https://issues.apache.org/jira/browse/DRILL-7151
Project: Apache Drill
Issue Type: Improvement
Reporter: Igor Guzenko
Assignee: Igor Guzenko
The SHOW TABLES for Hive worked inconsistently for very long time.
Before changes introduced by DRILL-7115 only accessible tables were shown only
when Hive Storage Based Authorization is enabled, but for SQL Standard Based
Authorization all tables were shown to user ([related
discussion|https://github.com/apache/drill/pull/461#discussion_r58753354]).
In scope of DRILL-7115 the only accessible restriction for Storage Based
Authorization was weakened in order to improve query performance.
There is still need to improve security of Hive show tables query and at the
same time do not violate performance requirements.
For SQL Standard Based Authorization this can be done by asking
```HiveAuthorizationHelper.authorizerV2``` for table's 'SELECT' permission.
For Storage Based Authorization performance acceptable approach is not known
for now, one of ideas is try using appropriate Hive storage based authorizer
class for the purpose.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
