You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by "Madhan Neethiraj (JIRA)" <ji...@apache.org> on 2014/10/15 00:16:34 UTC

[jira] [Created] (ARGUS-114) Argus Hive authorization to support HiveServe2 only (and not HiveCLI)

Madhan Neethiraj created ARGUS-114:
--------------------------------------

             Summary: Argus Hive authorization to support HiveServe2 only (and not HiveCLI)
                 Key: ARGUS-114
                 URL: https://issues.apache.org/jira/browse/ARGUS-114
             Project: Argus
          Issue Type: Bug
            Reporter: Madhan Neethiraj
            Assignee: Ramesh Mani


Currently Argus supports Hive authorization for both Hive CLI and HiveServer2. Hive CLI comes with a loophole where users can potentially access metastore and Argus config, giving them access to sensitive data such as Argus audit database.

Moving forward, Argus should only support HiveServer2 for Hive authorization. Users accessing Hive CLI are protected through permissions at HDFS for folder/files corresponding to the Hive tables.




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)