Gao, Rui-Xian created TRAFODION-2463:
----------------------------------------
Summary: Hive: Any user can do update statistics for hive tables
Key: TRAFODION-2463
URL: https://issues.apache.org/jira/browse/TRAFODION-2463
Project: Apache Trafodion
Issue Type: Bug
Components: sql-security
Affects Versions: 2.2-incubating
Environment: hadoop - HDP2.4
OS - CentOS6.7
Reporter: Gao, Rui-Xian
Assignee: Roberta Marton
Currently, any user can do 'update statistics' for hive tables, then the user
will become owner for this table and has all privileges on it.
1. create table in hive :
create external table ext_t1(a int);
2. logon trafci with user1, select from hive.hive.ext_t1 will get internal
error as described above, but the user can do 'update statistics' for the hive
table.
connect user1/******;
SQL>update statistics for table hive.qa_db_1.traf_ext_t1 on every column;
— SQL operation complete.
Expect result is ERROR[4481], the user cannot do 'update statistics' since
he/she doesn't have select privileges on the table.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
