Skip to content

[feat][CGS][hive] add security control to prevent location clause usage in hive tasks#968

Merged
casionone merged 6 commits intodev-2.0.0from
dev-2.0.0-hive-location
Apr 7, 2026
Merged

[feat][CGS][hive] add security control to prevent location clause usage in hive tasks#968
casionone merged 6 commits intodev-2.0.0from
dev-2.0.0-hive-location

Conversation

@v-kkhuang
Copy link
Copy Markdown

What is the purpose of the change

Background/Problem:
Hive tasks using the LOCATION clause can potentially access unauthorized data locations, posing security risks in multi-tenant environments. This security vulnerability needs to be addressed.

Purpose of Change:
To address this security concern, this PR adds control mechanisms to prevent or filter LOCATION clause usage in Hive tasks, ensuring data security and compliance.

Value/Impact:
After the change, Hive tasks are prevented from using LOCATION clause, enhancing data security and preventing unauthorized data access in production environments.

Related issues/PRs

Related issues: close #967
Related pr:none

Brief change log

  • Add security check to prevent LOCATION clause usage in Hive tasks
  • Optimize regular expression for LOCATION clause detection
  • Add test cases for security control

Checklist

  • I have read the Contributing Guidelines on pull requests.
  • I have explained the need for this PR and the problem it solves
  • I have explained the changes or the new features added to this PR
  • I have added tests corresponding to this change
  • I have updated the documentation to reflect this change
  • I have verified that this change is backward compatible
  • If this is a code change: I have written unit tests to fully verify the new behavior.

@v-kkhuang v-kkhuang added the enhancement New feature or request label Apr 7, 2026
Copy link
Copy Markdown

@casionone casionone left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

@casionone casionone merged commit 57e014c into dev-2.0.0 Apr 7, 2026
8 of 22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants