You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by ru jia <82...@163.com> on 2020/10/14 13:11:51 UTC

Review Request 72961: RANGER-3039:plugin-hive: user belongs to role 'admin' should has access to execute dfs command

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/72961/
-----------------------------------------------------------

Review request for ranger.


Bugs: RANGER-3039
    https://issues.apache.org/jira/browse/RANGER-3039


Repository: ranger


Description
-------

currently, dfs command is not supported through hive beeline, and it should be supported when user belongs role 'admin'


Diffs
-----

  hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java 1bec50b37 


Diff: https://reviews.apache.org/r/72961/diff/1/


Testing
-------

test procedure:
1. create role 'admin' in ranger web and add user 'testuser' in it.
2. login with 'testuser' and exec 'set role admin' in beeline.
3. exec 'dfs ls /' in beeline, expect return the result of ls.
test OK and already used in production environment.


Thanks,

ru jia