chuanjie.duan created RANGER-1866:
-------------------------------------

             Summary: support hive dfs command
                 Key: RANGER-1866
                 URL: https://issues.apache.org/jira/browse/RANGER-1866
             Project: Ranger
          Issue Type: New Feature
          Components: plugins
    Affects Versions: 0.6.3
            Reporter: chuanjie.duan


how about support hive dfs command, add a switch configuration to ranger 
config. In my case, user almost create external table, they need drop table 
meta and dfs rm data both. For convenient, all command in one hql script. 
User steps:
1. Login use their user/passwd(User must login firstly, this user cannot 
impersonate others)
2. Hiveserver start with user:hive, hive can proxy other user, beside supper 
user 
3. Use beeline to connect to hiveserver
4. User execute dfs command
5. Hiveserver recevice this command, and proxy to this user and execute
6. If user hasnt permission on hdfs path, namenode would return no permission
 



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to