[RANGER-2367] Hive "show grants" when Ranger is authorizer should show permission details from Ranger

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.0.0
• Component/s: Ranger
• Assignee: Ramesh Mani
• Reporter: Ramesh Mani
• Created: 13/Mar/19 18:29
• Updated: 27/Mar/19 07:14
• Resolved: 27/Mar/19 07:14

Description

Hive "show grants" when Ranger is authorizer should show permission details from Ranger.
Currently what is shown is wrong as it is getting from the Hive MetaStore. Actual grant details should come from Ranger permission.
This enhancement privileges for a Hive Resource or Hive Resource for user/group from Ranger Policies when ranger plugin is enabled for hive.
Show privilege on user/Group alone wouldn't be feasible in this case because of Ranger policy for user can be maintain for any databases/tables and this association would be difficult to map and get the corresponding permission from Ranger policies to show grants.
Attached is the visual representation of the output.

Issue Links

• is depended upon by: IMPALA-8280 Implement SHOW GRANT USER <user>