beliefer opened a new pull request #34543:
URL: https://github.com/apache/spark/pull/34543


   ### What changes were proposed in this pull request?
   
   The current implementation of persistent view is create hive table with view 
text.
   The view text is just a query string, so the hackers may tamper with it 
through various means.
   Such as, `select * from tab1` tampered with `drop table tab1`.
   
   
   ### Why are the changes needed?
   First, the view text is query string, `parser.parsePlan(viewText)` occurs 
more overhead than `parser.parseQuery(viewText)`.
   Second, the view text can be tampered by hackers and issue security 
vulnerabilities.
   
   
   ### Does this PR introduce _any_ user-facing change?
   'No'. Unless hackers tamper view text, user will not see any change.
   
   
   ### How was this patch tested?
   New tests.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to