[
https://issues.apache.org/jira/browse/TRAFODION-2463?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Work on TRAFODION-2463 started by Roberta Marton.
-------------------------------------------------
> Hive: Any user can do update statistics for hive tables
> -------------------------------------------------------
>
> Key: TRAFODION-2463
> URL: https://issues.apache.org/jira/browse/TRAFODION-2463
> Project: Apache Trafodion
> Issue Type: Bug
> Components: sql-security
> Affects Versions: 2.2-incubating
> Environment: hadoop - HDP2.4
> OS - CentOS6.7
> Reporter: Gao, Rui-Xian
> Assignee: Roberta Marton
>
> Currently, any user can do 'update statistics' for hive tables, then the user
> will become owner for this table and has all privileges on it.
> 1. create table in hive :
> create external table ext_t1(a int);
> 2. logon trafci with user1, select from hive.hive.ext_t1 will get internal
> error as described above, but the user can do 'update statistics' for the
> hive table.
> connect user1/******;
> SQL>update statistics for table hive.qa_db_1.traf_ext_t1 on every column;
> — SQL operation complete.
> Expect result is ERROR[4481], the user cannot do 'update statistics' since
> he/she doesn't have select privileges on the table.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
