[ 
https://issues.apache.org/jira/browse/HIVE-9994?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14367683#comment-14367683
 ] 

Xuefu Zhang commented on HIVE-9994:
-----------------------------------

Patch looks good. One question: do we need to check null for the input in 
redactLogString() as it's a public method?

> Hive query plan returns sensitive data to external applications
> ---------------------------------------------------------------
>
>                 Key: HIVE-9994
>                 URL: https://issues.apache.org/jira/browse/HIVE-9994
>             Project: Hive
>          Issue Type: Bug
>    Affects Versions: 1.0.0
>            Reporter: Sergio Peña
>            Assignee: Sergio Peña
>         Attachments: HIVE-9994.1.patch
>
>
> Some applications are using getQueryString() method from the QueryPlan class 
> to get the query that is being executed by Hive. The query string returned is 
> not redacted, and it is returning sensitive information that is logged in 
> Navigator.
> We need to return data redacted from the QueryPlan to avoid other 
> applications to log sensitive data.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to