Major Description
Ranger Hive Plugin currently does authorization on the URI which are in Hive commands.
e.g
CREATE EXTERNAL TABLE .... LOCATION [URI];
LOAD DATA INPATH [URI] INTO TABLE ...;
THE URIs in this commands would be HDFS uri and currently authorized by ranger.
This URI can be in various hive commands like
create database
create table
create function
insert
delete
add jar
add partition
But in case if these URI is S3 it not authorized as hdfs doesn't have the api to do on this. This JIRA would provide a READ and WRITE permission to s3 URI via a new Ranger Hive Service URI resource. Attaching a screen shot on the same
Attachments
Attachments
Issue Links
- links to
