[
https://issues.apache.org/jira/browse/HIVE-11179?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14616113#comment-14616113
]
ASF GitHub Bot commented on HIVE-11179:
---------------------------------------
GitHub user sundapeng opened a pull request:
https://github.com/apache/hive/pull/44
HIVE-11179: HIVE should allow custom converting from HivePrivilegeObj…
…ectDesc to privilegeObject for different authorizers
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/sundapeng/hive master
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/hive/pull/44.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #44
----
commit f82dc66be7cc876323567670b7000756394baf91
Author: Sun Dapeng <[email protected]>
Date: 2015-07-07T02:02:48Z
HIVE-11179: HIVE should allow custom converting from
HivePrivilegeObjectDesc to privilegeObject for different authorizers
----
> HIVE should allow custom converting from HivePrivilegeObjectDesc to
> privilegeObject for different authorizers
> -------------------------------------------------------------------------------------------------------------
>
> Key: HIVE-11179
> URL: https://issues.apache.org/jira/browse/HIVE-11179
> Project: Hive
> Issue Type: Improvement
> Reporter: Dapeng Sun
> Assignee: Dapeng Sun
> Labels: Authorization
>
> HIVE should allow custom converting from HivePrivilegeObjectDesc to
> privilegeObject for different authorizers:
> There is a case in Apache Sentry: Sentry support uri and server level
> privilege, but in hive side, it uses
> {{AuthorizationUtils.getHivePrivilegeObject(privSubjectDesc)}} to do the
> converting, and the code in {{getHivePrivilegeObject()}} only handle the
> scenes for table and database
> {noformat}
> privSubjectDesc.getTable() ? HivePrivilegeObjectType.TABLE_OR_VIEW :
> HivePrivilegeObjectType.DATABASE;
> {noformat}
> A solution is move this method to {{HiveAuthorizer}}, so that a custom
> Authorizer could enhance it.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
