You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@kyuubi.apache.org by GitBox <gi...@apache.org> on 2022/10/14 03:36:55 UTC

[GitHub] [incubator-kyuubi] elonlo opened a new issue, #3623: [Improvement] [authz] Implement Ranger URL Policy, support read/write permission control of cloud storage paths

elonlo opened a new issue, #3623:
URL: https://github.com/apache/incubator-kyuubi/issues/3623

### Code of Conduct

- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)

### Search before asking

- [X] I have searched in the [issues](https://github.com/apache/incubator-kyuubi/issues?q=is%3Aissue) and found no similar issues.

### What would you like to be improved?

Specify the cloud storage path (for example s3a://dev-admin/demo/) where the end-user permission is needed to read/write the Hive data from/to a cloud storage path.

Permissions:

- READ operation on the URL permits the user to perform SparkSQL operations which use S3 as data source for Hive tables.
- WRITE operation on the URL permits the user to perform SparkSQL operations which write data to the specified S3 location.

ref: https://docs.cloudera.com/HDPDocuments/HDP3/HDP-3.0.1/authorization-ranger/content/resource_policy_create_a_hive_policy.html

### How should we improve?

Get the locations of the DDL or Insert operation, construct the URL Privilege, and use the ranger interface for verify

### Are you willing to submit PR?

- [X] Yes. I can submit a PR independently to improve.
- [ ] Yes. I would be willing to submit a PR with guidance from the Kyuubi community to improve.
- [ ] No. I cannot submit a PR at this time.

--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org

[GitHub] [incubator-kyuubi] github-actions[bot] commented on issue #3623: [Improvement] [authz] Implement Ranger URL Policy, support read/write permission control of cloud storage paths

Posted by GitBox <gi...@apache.org>.

github-actions[bot] commented on issue #3623:
URL: https://github.com/apache/incubator-kyuubi/issues/3623#issuecomment-1278436561

   Hello @elonlo,
   Thanks for finding the time to report the issue!
   We really appreciate the community's efforts to improve Apache Kyuubi (Incubating).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org