Skip to content

[feature][CGS][hive] add security control to prevent location clause usage in hive tasks #967

@v-kkhuang

Description

@v-kkhuang

Search before asking

  • I had searched in the issues and found no similar issues.

Linkis Component

  • linkis-commons
  • linkis-computation-governance
  • linkis-dist
  • linkis-engineconn-plugin
  • linkis-extensions
  • linkis-orchestrator
  • linkis-public-enhancements
  • linkis-spring-cloud-services
  • linkis-web

Description

For security reasons, Hive tasks should not be allowed to use the LOCATION clause to prevent unauthorized data access and manipulation.

Steps to reproduce

  1. Submit a Hive task with LOCATION clause
  2. Observe the task execution

Expected behavior

Hive tasks with LOCATION clause should be rejected or the LOCATION clause should be filtered out for security compliance.

Your environment

  • Linkis version used: 2.0.0
  • Environment name and version:
    • hadoop-3.3.4
    • hive-2.3.3
    • spark-2.4.3/3.3.0
    • scala-2.11.12
    • jdk 1.8.0_xxx

Anything else

This is a security enhancement to prevent data leakage and unauthorized operations.

Are you willing to submit a PR?

  • Yes I am willing to submit a PR!

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions