[jira] [Created] (SENTRY-1231) Sentry doesn't secure index location uri, when do "CREATE INDEX LOCATION ''/uri"

[Anne Yu (JIRA)]

Anne Yu created SENTRY-1231:
-------------------------------

             Summary: Sentry doesn't secure index location uri, when do "CREATE 
INDEX LOCATION ''/uri"
                 Key: SENTRY-1231
                 URL: https://issues.apache.org/jira/browse/SENTRY-1231
             Project: Sentry
          Issue Type: Bug
          Components: Sentry
    Affects Versions: 1.8.0
            Reporter: Anne Yu


Sentry doesn't check the uri privilege of command, CREATE INDEX LOCATION 
'/path'. For example,

{code}
[root@ay-s3-1 ~]# sudo -u hdfs hdfs dfs -getfacl -R /data/testindex
# file: /data/testindex
# owner: hdfs
# group: hive
user::rwx
group::r-x
other::r-x

use systest> CREATE INDEX my_hdfs_table_index ON TABLE my_hdfs_table (viewtime) 
AS 'compact' WITH DEFERRED REBUILD LOCATION '/data/testindex';
{code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)