Question on Ranger authorisation with Hive

[reetika agrawal <ag...@gmail.com>]

Hi,

I wanted to understand w.r.t Ranger authorisation how does hive connection
work?

As I have tested when we fire any query through beeline Ranger policy are
authorised but when we do connect to hive using Thrift meta store URI
ranger polices are not authorised , so my doubt here is where does ranger
agent reside actually when it does ranger policy check with beeline
connection?



-- 
Thanks,
Reetika Agrawal

Re: Question on Ranger authorisation with Hive

[Ramesh Mani <rm...@apache.org>]

Hi Reetika,

Ranger resided in HiveServer2 when invoked in beeline.

Please refer to https://issues.apache.org/jira/browse/HIVE-21753

Hive Metastore authorization via Ranger can be done by enabling the
following property in hive-site.xml

 hive.metastore.pre.event.listeners =
org.apache.hadoop.hive.ql.security.authorization.plugin.metastore.HiveMetaStoreAuthorizer.

Thanks,
Ramesh

On Tue, Jun 25, 2019 at 10:48 AM reetika agrawal <
agrawal.reetika786@gmail.com> wrote:

> Hi,
>
> I wanted to understand w.r.t Ranger authorisation how does hive connection
> work?
>
> As I have tested when we fire any query through beeline Ranger policy are
> authorised but when we do connect to hive using Thrift meta store URI
> ranger polices are not authorised , so my doubt here is where does ranger
> agent reside actually when it does ranger policy check with beeline
> connection?
>
>
>
> --
> Thanks,
> Reetika Agrawal
>