You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "chuanjie.duan (JIRA)" <ji...@apache.org> on 2017/10/31 06:47:06 UTC

[jira] [Created] (RANGER-1866) support hive dfs command

chuanjie.duan created RANGER-1866:
-------------------------------------

             Summary: support hive dfs command
                 Key: RANGER-1866
                 URL: https://issues.apache.org/jira/browse/RANGER-1866
             Project: Ranger
          Issue Type: New Feature
          Components: plugins
    Affects Versions: 0.6.3
            Reporter: chuanjie.duan


how about support hive dfs command, add a switch configuration to ranger config. In my case, user almost create external table, they need drop table meta and dfs rm data both. For convenient, all command in one hql script. 
User steps:
1. Login use their user/passwd(User must login firstly, this user cannot impersonate others)
2. Hiveserver start with user:hive, hive can proxy other user, beside supper user 
3. Use beeline to connect to hiveserver
4. User execute dfs command
5. Hiveserver recevice this command, and proxy to this user and execute
6. If user hasnt permission on hdfs path, namenode would return no permission
 



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)