[ 
https://issues.apache.org/jira/browse/HIVE-10145?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14393933#comment-14393933
 ] 

Thejas M Nair commented on HIVE-10145:
--------------------------------------

Thanks for the view [~vikram.dixit]. I did some manual testing to verify this 
works.

[~hitesh] I think I have run into what looks like a Tez bug during tests.
Though I set the end user as the view and write user, the user does not get 
added to the writers list.

GET 
http://localhost:8188/ws/v1/timeline/domain/Tez_ATS_application_1428012550608_0017_hive_20150403011754_26c51eb0-6ef5-4f5a-8285-f14640b0c1b1:1
Gives - 
{code}
{
id: 
"Tez_ATS_application_1428012550608_0017_hive_20150403011754_26c51eb0-6ef5-4f5a-8285-f14640b0c1b1:1",
owner: "hive",
readers: "hive,hrt_qa ",
writers: "hive",
createdtime: 1428023886613,
modifiedtime: 1428023886613
}
{code}

I see that calls to getUsersWithModifyACLs are missing from 
ATSHistoryACLPolicyManager.java, it has only calls to getUsersWithViewACLs. Is 
there any existing bug tracking that issue ?


> set Tez ACLs appropriately in hive
> ----------------------------------
>
>                 Key: HIVE-10145
>                 URL: https://issues.apache.org/jira/browse/HIVE-10145
>             Project: Hive
>          Issue Type: Bug
>            Reporter: Thejas M Nair
>            Assignee: Thejas M Nair
>         Attachments: HIVE-10145.1.patch
>
>
> Hive should make the necessary changes to integrate with Tez and Timeline. It 
> should pass the necessary ACL related params to ensure that query execution + 
> logs is only visible to the relevant users.
> Proposed Change -
> Set DAG level ACL for user running the query (the end user), to allow modify 
> + view



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to