chuanjie.duan created RANGER-1866:
-------------------------------------
Summary: support hive dfs command
Key: RANGER-1866
URL: https://issues.apache.org/jira/browse/RANGER-1866
Project: Ranger
Issue Type: New Feature
Components: plugins
Affects Versions: 0.6.3
Reporter: chuanjie.duan
how about support hive dfs command, add a switch configuration to ranger
config. In my case, user almost create external table, they need drop table
meta and dfs rm data both. For convenient, all command in one hql script.
User steps:
1. Login use their user/passwd(User must login firstly, this user cannot
impersonate others)
2. Hiveserver start with user:hive, hive can proxy other user, beside supper
user
3. Use beeline to connect to hiveserver
4. User execute dfs command
5. Hiveserver recevice this command, and proxy to this user and execute
6. If user hasnt permission on hdfs path, namenode would return no permission
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)