[
https://issues.apache.org/jira/browse/HIVE-10658?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14554635#comment-14554635
]
Sergio Peña commented on HIVE-10658:
------------------------------------
Hi,
Could you use the method 'isPathEncrypted' that is already part of
SemanticAnalyzer class? This will get the hdfs encryption shim from
SessionState.
Also, what if the encryption zone is read-only?
Take a look at the 'getStrongestEncryptedTablePath(QB qb)' method. This checks
for read-only tables, and compares key strengths between encryption zones.
> Insert with values clause may expose data that should be encrypted
> ------------------------------------------------------------------
>
> Key: HIVE-10658
> URL: https://issues.apache.org/jira/browse/HIVE-10658
> Project: Hive
> Issue Type: Sub-task
> Components: Security
> Reporter: Eugene Koifman
> Assignee: Eugene Koifman
> Attachments: HIVE-10658.2.patch, HIVE-10658.3.patch
>
>
> Insert into T values() operation uses temporary table.
> the data in temp tables is stored under the hive.exec.scratchdir which is not
> usually encrypted. This is a similar issue to using scratchdir for staging
> query results
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
