Hello, I have been playing with Apache Ranger for some time and there are are some things that are still puzzling me:
- With the HDFS plugin, it seems that rights are given when Ranger rights OR standard hadoop rights are provided. For example, a directory with 755 rights will always be readable by everyone, whatever Ranger says. Therefore, to have ranger actually controlling the rights of a directory, there is a need to chmod 700 this directory. Is that the expected behaviour? - Hive plugin works great for hiveserver access, however the direct use of hive command line client does not take Ranger rights into account. Is that a feature? Is it planned to change in the future? I might have missed a documentation that would explain all that. Regards, Julien
