Details
-
New Feature
-
Status: Open
-
Major
-
Resolution: Unresolved
-
0.6.3
-
None
-
None
Description
how about support hive dfs command, add a switch configuration to ranger config. In my case, user almost create external table, they need drop table meta and dfs rm data both. For convenient, all command in one hql script.
User steps:
1. Login use their user/passwd(User must login firstly, this user cannot impersonate others)
2. Hiveserver start with user:hive, hive can proxy other user, beside supper user
3. Use beeline to connect to hiveserver
4. User execute dfs command
5. Hiveserver recevice this command, and proxy to this user and execute
6. If user hasnt permission on hdfs path, namenode would return no permission