[RANGER-114] Argus Hive authorization to support HiveServe2 only (and not HiveCLI)

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.4.0
• Fix Version/s: 0.4.0
• Assignee: Ramesh Mani
• Reporter: Madhan Neethiraj
• Created: 14/Oct/14 22:16
• Updated: 15/Oct/14 22:59
• Resolved: 15/Oct/14 21:06

Description

Currently Argus supports Hive authorization for both Hive CLI and HiveServer2. Hive CLI comes with a loophole where users can potentially access metastore and Argus config, giving them access to sensitive data such as Argus audit database.

Moving forward, Argus should only support HiveServer2 for Hive authorization. Users accessing Hive CLI are protected through permissions at HDFS for folder/files corresponding to the Hive tables.