Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: update hive.security.authorization.sqlstd.confwhitelist for HIVE-12419

...

Info
titleVersion

Hive 0.13.0 introduces fine-grained authorization based on the SQL standard authorization model. This is still a work in progress – see HIVE-5837 for the functional specification and list of subtasks.

hive.users.in.admin.role
  • Default Value: (empty)
  • Added In: Hive 0.13.0 with HIVE-5959

...

  • Default Value: (empty, but includes list shown below implicitly)
  • Added In: Hive 0.13.0 with HIVE-6846; updated in Hive 0.14.0 with HIVE-8534 and in subsequent releases with several JIRA issues

A comma separated list of configuration properties that users are authorized to set when SQL standard base authorization is used.

If this parameter is not set, the default list is added by the SQL standard authorizer. To display the default list for the current release, use the command 'set hive.security.authorization.sqlstd.confwhitelist'.

In  The default list has these properties in Hive 0.13.0 the default white list has these properties (see HIVE-6846 for the same list arranged one property per line):

...

Hive 0.14.0 adds new parameters to the default white list (see HIVE-8534) and Hive 1.2.0 and 1.2.1 add more new parameters (see HIVE-10578HIVE-10678, and HIVE-10967). To display the current default list, use the command 'set hive.security.authorization.sqlstd.confwhitelist'Some parameters are added automatically when they match one of the regex specifications for the white list in HiveConf.java (for example, hive.log.trace.id in release 2.0.0 -- see HIVE-12419).

Note that the hive.conf.restricted.list checks are still enforced after the white list check.

...