[
https://issues.apache.org/jira/browse/RANGER-1669?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16065334#comment-16065334
]
Thejas M Nair commented on RANGER-1669:
---------------------------------------
Falling back to SQLStdHiveAccessControler won't give the right results for show
grants. Ranger permissions are different from SQLStdHiveAccessControler (which
is used for 'sql standard authorization'
(Why I am I not able to add only 'internal comment's ? )
> We need to support the original functionality of hive：show grant user username
> ------------------------------------------------------------------------------
>
> Key: RANGER-1669
> URL: https://issues.apache.org/jira/browse/RANGER-1669
> Project: Ranger
> Issue Type: New Feature
> Components: plugins
> Affects Versions: 1.0.0
> Reporter: peng.jianhua
> Assignee: peng.jianhua
> Priority: Critical
> Fix For: master
>
> Attachments:
> 0001-RANGER-1669-We-need-to-support-the-original-function.patch,
> show-grant-error.png, show-grant-user-sucess.png
>
>
> We need to support the original functionality of hive,
> 1.Scene: the original hive supports sql:show grant user glc;
> 2.Error：0: jdbc:hive2://10.43.182.241:10000> show grant user glc;
> Error: Error while processing statement: FAILED: Execution Error, return code
> 1 from org.apache.hadoop.hive.ql.exec.DDLTask. showPrivileges() not
> implemented in Ranger HiveAuthorizer (state=08S01,code=1)
> 3.Solution：When you integrate the Ranger plug-in into hive, you can't execute
> show grant user glc；
> Modify RangerHiveAuthorizerBase.java to achieve the specific implementation
> of showPrivileges,
> 4.The modified results can continue to support the original functionality of
> the hive.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
