Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-114

Argus Hive authorization to support HiveServe2 only (and not HiveCLI)

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 0.4.0
    • Fix Version/s: 0.4.0
    • Component/s: None
    • Labels:
      None

      Description

      Currently Argus supports Hive authorization for both Hive CLI and HiveServer2. Hive CLI comes with a loophole where users can potentially access metastore and Argus config, giving them access to sensitive data such as Argus audit database.

      Moving forward, Argus should only support HiveServer2 for Hive authorization. Users accessing Hive CLI are protected through permissions at HDFS for folder/files corresponding to the Hive tables.

        Attachments

        1. Argus114.patch
          1 kB
          Ramesh Mani

          Activity

            People

            • Assignee:
              rmani Ramesh Mani
              Reporter:
              madhan.neethiraj Madhan Neethiraj
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: