Uploaded image for project: 'HCatalog'
  1. HCatalog
  2. HCATALOG-106

Describe database is not be checked for authorization

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Minor
    • Resolution: Fixed
    • 0.2
    • 0.3
    • security
    • None

    Description

      Based on a code inspection of HCatSemanticAnalyzer.java it looks as if HCatalog is not checking whether a user is authorized to do a describe database before doing it. HCatalog only allows describe table if the user has read permission on the table directory. It seems we should do the same in the describe database case.

      Attachments

        Issue Links

          Activity

            People

              ashutoshc Ashutosh Chauhan
              gates Alan Gates
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: