Na Li created SENTRY-2152:

             Summary: Only Admin can set dbproperty 'owner.privileges'
                 Key: SENTRY-2152
             Project: Sentry
          Issue Type: Sub-task
          Components: Sentry
    Affects Versions: 2.1.0
            Reporter: Na Li
             Fix For: 2.1.0

Right now, anyone can set database property. We should add authorization when 
setting dbproperty 'owner.privileges' from hive, so only admin can do it.
The allowed values are: none, all, all with grant

For example, when a non-admin user issues command
alter database db1 set dbproperty('owner.privileges'='all with grant')
The command should fail and the error message indicating the user does not have 
right to set this value.

This message was sent by Atlassian JIRA

Reply via email to